Germany – IT services: consulting, software development, Internet and support – Asset- und Schwachstellenmanagement

Subject of the contract

The contractor (AN) provides the service packages “Asset Discovery and Management”, “Vulnerability Management” and Patch Management for LINK digital (LD) based on the Tanium platform. The service is operated as an EU-hosted SaaS solution and includes all the requirements described below as a managed service, as well as the associated technical platform operation, the performance of regular scans, the evaluation and prioritization of findings, the provision of recommendations for action, and the integration into LD's internal systems and processes.

Scope of services

The scope of services includes in particular:

Operation, monitoring and further development of the Tanium platform as the basis for the three central service packages

Provision of the licenses required for the service

Performance of regular and ad-hoc vulnerability scans of the LD infrastructure

Prioritization of vulnerabilities according to CVSS, threat situation and business criticality

Patch management including emergency/out-of-band patching

Integration of asset and vulnerability data into LD systems (CMDB, Jira, Logic App)

Creation of regular and ad-hoc reports for asset management

Support in securing the systems through hardening recommendations

Detection of unauthorized systems (Shadow IT)

Structured transition phase with validation and acceptance process

Orderly exit and transition phase at the end of the contract

Outside the scope of services is the packaging and the lifecycle of corporate applications.