THE PROVISON OF A VULNERABILITY MANAGEMENT, DETECTION RESPONSE AND PATCH MANAGEMENT SOLUTION AND LICENCES

HSE requires a licence based, lightweight, vulnerability Management, Detection and Response solution that has integrated Patch Management and Deployment.

Both Vulnerability and Patch Management must be provided through one single solution.

HSE also requires details on the complexity of the implementation of the solution and will evaluate based on bidder responses.

The implementation should be easily delivered using standard tooling such as Intune or SCCM.

Installation, upgrades, and configuration updates must have the option to be delivered remotely.

Stored data must be kept in an encrypted format.

The solution must encrypt each users' data uniquely, so that only the user who created the data can access it.

It must have no insight into customer data or access to the encryption key, and as a result, has no ability to decrypt the stored data.

The solution must be behind network-based, redundant, highly-available firewalls and intrusion monitoring.

In addition, each host must be behind a localised firewall.

The solution must use a hardened OS with a rapid patching policy.