Orange County NC Website
Browse       Search
Orange County, NC August 8, 2024 <br />ASTRO® 25 Advanced Services Statement of Work <br />Advanced Services Detailed Description <br /> <br />Use or disclosure of this proposal is subject to the restrictions on the cover page. <br />Motorola Solutions <br />Page 14 <br />Motorola Responsibilities <br />• Upon the identification of an IoC, notify the Customer's documented contact and initiate the <br />escalation plan. <br />• Take documented, Customer approved actions in an attempt to contain an IoC to the extent <br />enabled via Motorola managed technology. Communicate to the Customer any additional <br />potential containment actions and incident response resources that can be taken acr oss the <br />Customer’s managed IT infrastructure. <br />• Perform investigation using the ActiveEye MDR integrated and enabled data sources in an initial <br />attempt to determine the extent of an IoC. <br />• Document and share IoC and artifacts discovered during investigation. Motorola services <br />exclude performing on-site data collection or official forensic capture activities on physical <br />devices. <br />Customer Responsibilities <br />• Maintain one named PoC to coordinate regular team discussions and organize data collection <br />and capture across the Customer and Motorola teams. <br />• If determined to be required by Customer, contract an Incident Response service provider to <br />perform procedures beyond the scope of this Agreement such as forensic data capture, <br />additional malware removal, system recovery, ransomware payment negotiation, la w <br />enforcement engagement, insurance provider communications, identify patient zero, etc. <br />4.1.1.5.5 Event Response and Notification <br />Motorola will analyze events created and/or aggregated by the Service, assess their type, and notify the <br />Customer in accordance with the following table. <br />Table 4-1: Event Handling <br />Event Type Details Notification Requirement <br />False Positive or <br />Benign <br />Any event(s) determined by Motorola to not <br />likely have a negative security impact on <br />the organization. <br />None <br />Event of Interest <br />(EOI) <br />Any event(s) determined by Motorola to <br />likely have a negative security impact on <br />the organization. <br />Escalate to Customer in accordance with <br />routine notification procedure. <br />Escalate in accordance with urgent <br />notification procedure when required by <br />agreed-upon thresholds and SOC <br />analysis. <br />Notification procedures are included in <br />Table 4-2: Notification Procedures. <br />Notification <br />Motorola will establish notification procedures with the Customer, generally categorized in accordance <br />with the following table. <br />Docusign Envelope ID: AD07CE02-1F94-4496-ABD0-D61F9CBE562C