Security Services

Norges Bank

Norges Bank is hereby starting the process of pre-qualification of tenderers for delivery of a solution as described below to detect and respond to different phases of ICT-based attacks.
Norges Bank aims to procure security technology and services to support intrusion detection and response for security related ICT-incidents. The delivery will include technical solutions for, but not limited to:
— Intrusion detection;
— Monitoring and triage of alerts;
— Incident handling support;
— Response and analysis of security incidents;
— Artifact handling;
— Vulnerability scanning;
— Memory and disk forensics;
— Advanced Persistent Threat intelligence;
— Dynamic and static malware analysis including reverse engineering of malware;
— Log handling (SIEM);
— Incident handling and analysis at the premises of Norges Bank.
There may be a gradual implementation of the services.
The service should account for threat actors up to high levels of capability and available resources. The managed security monitoring is expected to operate at a 24/7/365 basis.
The service is expected to include a Security Information and Event Management (SIEM) solution, alternatively a Log Management solution with focus on incident support and/or detection of incidents based on correlation of events. The provider should also be a mature consumer and producer of threat intelligence, and actively using threat intelligence in security monitoring and incident handling. The log or SIEM-solution shall make the log material available to internal resources for further analysis.
The operation of the Norges Bank IT infrastructure and computing environment is outsourced to one large and a few small service providers.
The delivery is exempt from public disclosure pursuant to Section 13 of the Freedom of Information Act (cf. Section 12 of the Norges Bank Act).

Frist
Fristen for mottak av tilbud var 2015-04-16. Anskaffelsen ble publisert 2015-03-15.

Leverandører
Følgende leverandører er nevnt i tildelingsbeslutninger eller andre anskaffelsesdokumenter:

• • Mnemonic As

Hvem?

• • Norges Bank

Hva?

• • Databehandling › Dataanalyse
• • Internett tjenester › Tjenesteleverandør tjenester

Hvor?

• • Norge