Orange County NC Website
Browse       Search
Orange County August 8, 2024 <br />ASTRO 25 Managed Detection and Response 24-177976 / Cybersecurity Services <br />Solution Description <br /> <br />Use or disclosure of this proposal is subject to the restrictions on the cover page. <br />Motorola Solutions Confidential Restricted <br /> <br />Page 1-2 <br />1.2 Service Description <br />Managed Detection and Response is performed by Motorola Solutions’ Security Operations Center <br />(SOC) using the ActiveEye SM security platform. The SOC’s cybersecurity analysts monitor for alerts <br />24x7x365. If a threat is detected, analysts will investigate and initiate an appropriate Customer <br />engagement. Customer engagements may include but are not limited to: requesting additional <br />information from the Customer, continuing to monitor the event for further development, or informing <br />the Customer to enact the Customer’s documented Incident Response plan. <br />SOC analysts rely on monitoring elements to detect signs of a potential threat impacting the Customer’s <br />ASTRO 25 network and applicable Customer Enterprise Network (CEN) systems. These elements are <br />described below. <br />The Managed Detection and Response service includes the deployment and optimization of these <br />elements into the Customer’s network. <br />1.2.1 Managed Detection and Response Elements <br />This section and its subsections describe Managed Detection and Response elements, and their <br />applicability for specific infrastructure. <br />1.2.1.1 ActiveEye Security Platform <br />Motorola Solutions’ ActiveEyeSM security platform collects and analyzes security event streams from <br />ActiveEye Remote Security Sensors (AERSS) in the Host’s ASTRO 25 network and applicable CEN <br />systems, using security orchestration and advanced analytics to identify the most important security <br />events from applicable systems. <br />The platform automates manual investigation tasks, verifies activity with external threat intelligence <br />sources, and learns what events will require rapid response action. <br />If the Host provides it, the Customer will receive access to the ActiveEye platform as part of this <br />service. ActiveEye will serve as a single interface to display system security information. Using <br />ActiveEye, the Customer will be able to configure alerts and notifications, review s ecurity data, and <br />perform security investigations. <br />Applies to included console infrastructure. <br />1.2.1.2 ActiveEye Managed Security Portal <br />The ActiveEye Managed Security Portal will synchronize security efforts between the Host, Customer <br />and Motorola Solutions. From this central point, the Customer will be able to view threat insights, event <br />investigations, security reports, threat advisories, and status of any security cases. <br />Docusign Envelope ID: AD07CE02-1F94-4496-ABD0-D61F9CBE562C