Orange County NC Website
Browse       Search
90 <br /> Orange County August 8,2024 <br /> ASTRO 25 Managed Detection and Response 24-177976/Cybersecurity Services <br /> Table 2-1: Event Handling <br /> • 111Requirement <br /> False Positive or Any event(s)determined by Motorola None <br /> Benign Solutions to not likely have a negative <br /> security impact on the organization. <br /> Event of Interest Any event(s)determined by Motorola Escalate to Customer in accordance <br /> (EOI) Solutions to likely have a negative security with routine notification procedure. <br /> impact on the organization. Escalate in accordance with urgent <br /> notification procedure when required by <br /> agreed-upon thresholds and SOC <br /> analysis. <br /> Notification procedures are included in <br /> Table 2-2: Notification Procedures. <br /> Notification <br /> Motorola Solutions will establish notification procedures with the Customer, generally categorized in <br /> accordance with the following table. <br /> Table 2-2: Notification Procedures <br /> Notification Procedure M <br /> Routine Notification The means, addresses, format, and desired content(within the capabilities <br /> Procedure of the installed technology)for Events of Interest. These can be formatted <br /> for automated processing, e.g., by ticketing systems. <br /> Urgent Notification Additional, optional means and addresses for notifications of Events of <br /> Procedure Interest that require urgent notification. These usually include telephone <br /> notifications. <br /> Motorola Solutions will notify the Customer according to the escalation and contact procedures defined <br /> by the Customer and Motorola Solutions during the implementation process. <br /> Tuning <br /> Motorola Solutions will assess certain events to be environmental noise, potentially addressable <br /> configuration issues in the environment, or false positives. Motorola Solutions may recommend these <br /> be addressed by the Customer to preserve system and network resources. <br /> Motorola Solutions will provide the Customer with the ability to temporarily suppress alerts reaching <br /> ActiveEye, enabling a co-managed approach to tuning and suppressing events or alarms. The SOC <br /> may permanently suppress particular alerts and alarms if not necessary for actionable threat detection. <br /> Tuning Period Exception <br /> The tuning period is considered to be the first 30 days after each service module has been confirmed <br /> deployed and configured and starts receiving data. During the tuning period, Motorola Solutions may <br /> make recommendations to the Customer to adjust the configurations of their installed software so <br /> Services can be effectively delivered. Service Availability will not be applicable during the tuning period <br /> and responses or notifications may not be delivered. However, Motorola Solutions will provide <br /> responses and notifications during this period. <br /> Statement of Work ®MOTOROLA SOLUTIONS <br /> Use or disclosure of this proposal is subject to the restrictions on the cover page. <br /> Motorola Solutions Confidential Restricted <br /> Page 2-6 <br />