Germany – Security software package – Security Operations Center (SOC)

Security Operations Center (SOC) Lot 1: MDR/XDR (Cloud) Lot 2: Incident Response Lot 3: OSINT Service Contract duration: 2 years Options: Extension by 2 years each (max. 8 years) To strengthen digital security in the long term, Berliner Wasserbetriebe is building a hybrid Security Operations Center (SOC). The internal SOC team will be supported by external expertise and modern technologies. This will create a high-performance, flexible and future-proof security organization. The hybrid SOC pursues several goals: it is to enable comprehensive monitoring of IT systems (in the company and in the cloud) based on a modern XDR platform. The aim is to detect and repel anomalies, attacks and security-relevant incidents at an early stage. The XDR platform forms the central alarm and monitoring environment, on which both the internal SOC team and the external MDR service provider work. The internal know-how of our SOC team will be strengthened through continuous training and exercises with the support of our external partners. The following tender comprises three lots, which together form the essential external components for the successful establishment and operation of the hybrid SOC. Lot 1 The MDR service based on an XDR platform provides the technical basis for monitoring, correlation and analysis of security events and supports integration into existing processes. Lot 2 The Incident Response service ensures operational capability in an emergency. It includes a qualified deployment team that supports analysis, containment, eradication and recovery. Lot 3 The OSINT analysis includes strategic foresight: by systematically collecting, evaluating and preparing open-source intelligence, threats, attack indicators and trends are detected at an early stage and prepared in the form of situation reports and recommendations for action. This allows preventive measures to be initiated in good time.