As part of its overall security strategy, the City of Toronto ("the City") intends to procure a Managed Security Services Provider (the…

As part of its overall security strategy, the City of Toronto ("the City") intends to procure a Managed Security Services Provider (the "MSSP") to deliver comprehensive security operational and monitoring services of the City's network environment and all its assets to prevent, detect, respond, mitigate and recover from cyber security threats and events. The MSSP is expected to partner with the City in co-managing its existing SIEM, EDR and NDR security technologies, as well as to provide new solutions where necessary to meet requirements. The proposed solution will provide 24 hours per day, 7 days per week, 365 days per year (24x7x365) mature Security Operations Centre (SOC) which will manage the City's existing SIEM, EDR and NDR solutions as well as any new solutions that are deployed to meet requirements. The proposed solution will also include a 24 hours per day, 7 days per week, 365 days per year (24x7x365) comprehensive security incident response service which encompasses detection, analysis, evidence collection, containment, eradication, remediation, recovery and support with on-site incident management. Services to be delivered as part of the MSSP solution include forensics services support for investigations, threat intelligence, device management, ongoing vulnerability assessments and reporting (collectively referred to as the "Solution").