Cisco Security Incident Response Retainer Enhanced

The City of Pembroke Pines is seeking bids from qualified firms, hereinafter referred to as the Contractor, to provide the requested Cisco Security Incident Response Retainer Enhanced pricing, in accordance with the terms, conditions, and specifications contained in this solicitation.Cisco Security Incident Response Retainer Enhanced is a flexible service offering that provides both proactive (readiness) and reactive (retainer) services against cyber threats.Proactive (readiness) services include:Incident response readiness assessment:  evaluate a number of data points, including previous incidents, current roles and responsibilities, organizational design, patching operations, logging capabilities, and more to obtain a deep understanding of the environment.Proactive threat hunting: work alongside the City's IT team to determine the focus in nature. Depending on the focus, appropriate tools and methodologies will be planned to cover those areas. Then deploy the needed technologies into the environment and configure and tune them. After this, will utilize numerous methods to look for active compromises. Upon completion, a report is issued that includes a compromise assessment summary, recap, findings, and recommendations.Strategy and planning: build out of a roadmap and associated plans for how to respond to incidents.Tabletop exercise: design, lead, and facilitate exercises to evaluate the effectiveness of the Incident Response (IR) plan.Assessment findings: Based on the findings from the readiness assessment, strategy and planning, and tabletop exercises, prioritized recommendations are provided that will assist in prepping the environment to better prevent, detect, and respond to future incidents.Defined service levels: 24x7x365 access to resources when needed most. Cisco Security Incident Response Retainer team(s) can respond within 2 hours remotely and be deployed to your location within 24 hours. Reactive (retainer) services include:Triage: Assessing the current incident/situation to understand how best to initiate and design a response strategy.Coordination: Tracking status, outstanding action items, and compiling updates as needed to make sure the incident is handled with care.Investigation: Understanding the scope of the attack by deploying the necessary tools, reviewing log sources to analyze patterns and issues, performing needed forensics, and reverse engineering malware.Containment: Quarantining and severing additional actions by the attacker.Remediation: Removal of malware and other tools and artifacts left by the attackers.Breach communications: If needed, assistance can be provided from internal crisis communications team to make sure the proper communications experts are brought in for the job, not relying on a one-size-fits-all approach. Overall benefits of Cisco Security Incident Response include:Better readiness to respond to incidentsShortened time to security resolutionRisk mitigation for reactive incidentsDecreased risk through proactive security designExpert team that’s ready to help when you need itReduced costs of incidentsAbility to get the City back to normal more quickly following an incidentHeightened ability to combat cyber-threatsValidated security controlsAccelerated capabilities of your security operations center and incident reporting