21-735 - Export Development Canada - SOC and MDR Provider

Export Development Canada ("EDC") is seeking to contract with a SOC and MDR provider who will monitor the security of EDC’s hybrid information technology (“IT”) environment.

The provider will be required to:

• utilize Microsoft Azure Sentinel security information and event management (“SIEM”) and security orchestration, automation, and response (“SOAR”) platform, taking advantage of its full range of capabilities and integrations, while utilizing Azure Lighthouse to connect with EDC's Sentinel instance;
• configure Sentinel and guide EDC to configure existing and future IT assets in the public cloud, on-premises, or software as a service (“SaaS”), to ingest events and provide alert triage and incident escalation services correlated against an extensive range of threat intelligence and supported with extensive level of detail and guidance to EDC’s computer security incident response (“CSIRT”) and network operations centre (“NOC”) teams;
• configure Sentinel SOAR to perform a range of low-risk, high-frequency, automated mitigations across the various EDC technology platforms listed in Appendix B.
• provide enhanced client dashboard and extensive regular reporting on the performance of its service and cybersecurity activities;
• lead with exceptional account and service management, complemented with industry vision and expertise, to drive continuous service improvements; and
• provide temporary monitoring of EDC's IBM QRadar platform until the bidder has fully onboarded all existing EDC assets into Sentinel.