Germany – Facilities management services involving computer operation – Managed Security Services und Aufbau eines Security Operation Centers

The University of Hamburg (UHH) is not only one of the most research-intensive and largest universities in Germany with around 44,000 students – it is also a modern knowledge organisation, especially as a place for research, teaching and education. Today, this knowledge is predominantly held in the form of digital information and processed and conveyed with the help of digital tools. However, digitalisation goes far beyond the digital representation of information and its processing with digital methods: In the sense of a synergistic interaction of analogue and digital, digitality has long been an integral part of the study, research, teaching, learning, living and working reality at the UHH. The corresponding digital strategy of the UHH is understood as a university-wide framework for a reflective approach to the opportunities and challenges of digital transformation as well as the successful implementation of digitalisation projects and initiatives. The project “Support through a Managed Security Service Provider (MSSP)” aims to meet the security requirements of the existing IT of the UHH through a suitable service provider, if these cannot be met by internal capacities. The subject of this procurement is a BWFG-funded establishment and operation of a Security Operations Center located at the UHH: ▪ University of Hamburg (UHH) ▪ Hamburg University of Applied Sciences (HAW) ▪ Hamburg University of Technology (TUHH) ▪ HafenCity University Hamburg (HCU) ▪ Hamburg University of Fine Arts (HfBK) ▪ Hamburg University of Music and Drama (HfMT). The tender essentially includes services in the following areas: ▪ Computer Emergency Response Team (CERT) services ▪ Threat Intelligence ▪ Security Operations Center (SOC) ▪ Automation of responses to security incidents ▪ Incident Response (IR) ▪ Operation of a Security Information and Event Management (SIEM) system ▪ Vulnerability scans and vulnerability management. Overarching goals: ▪ Ensuring comprehensive operation, monitoring and continuous improvement of information security and proactive enhancement of the security level at Hamburg's universities ▪ Early detection, assessment and appropriate handling of security incidents ▪ Sustainable reduction of risks to the IT systems, data and business processes of the UHH.