2024-706-E-Emergency Svc-Motorola Solutions-PSC Radio System Service Maintenance

Browse Search

Orange County, NC August 8, 2024 ASTRO® 25 Advanced Services Statement of Work Advanced Services Detailed Description Use or disclosure of this proposal is subject to the restrictions on the cover page. Motorola Solutions Page 11 • Allow Motorola dispatched field service technicians physical access to monitoring hardware when required. • Cooperate with Motorola and perform all acts that are required to enable Motorola to provide the services described in this SOW. • Configure and maintain networking infrastructure physical and logical configuration to mirror (typically via a port(s) on a switch) network traffic to the ActiveEye sensor for applicable CEN systems. • Responding to Cybersecurity Incident Cases created by the Motorola SOC. 4.1.1.4 Service Modules 4.1.1.4.1 Log Collection / Analytics The AERSS deployed in the system collects logs and other security information from applicable servers, workstations, switches, routers, Network Detection, and firewalls. This information is forwarded to the ActiveEye platform, which uses advanced analytics to identify signs of security incidents. If it identifies signs of a security incident, ActiveEye notifies the SOC for further analysis. Motorola Responsibilities • Consult with and advise the Customer on performing necessary system configurations to direct log sources to the appropriate Remote Security Sensor. • The SOC will consult with the Customer to identify appropriate log sources for the level of threat detection desired in each environment. Customer Responsibilities • If applicable, configure customer managed networking infrastructure to allow ActiveEye Remote Security Sensor to communicate with ActiveEye as defined. • If applicable, configure any Customer managed devices in the CEN to forward data to ActiveEye. Applies to included ASTRO 25 RNI, CEN, and Control Room CEN infrastructure. 4.1.1.4.2 Attack Surface Management Attack Surface Management is provided for the ASTRO internet -facing, external network interfaces. The scan is enabled from an internet cloud hosted service outside the ASTRO network. Discovery and vulnerability scans will be run quarterly or on a less frequent schedule defined with the Customer. The initial scan results will be discussed with the Customer during service onboarding. Subsequent scans will be reviewed by a cybersecurity analyst. If any new findings of interest are surfaced, a ticket will be created to communicate these findings with the customer defined contacts. Prior to enabling this service module, an Attack Surface Management Authorization Form must be completed. The authorization form provides Motorola the following: • Information on Customer assets authorized for scans such as IP addresses and/or domain names of the internet-facing, external assets to be scanned. • Lists names of Customer points of contact for receipt of scan reports. Docusign Envelope ID: AD07CE02-1F94-4496-ABD0-D61F9CBE562C