Orange County NC Website
Orange County August 8, 2024 <br />ASTRO 25 Managed Detection and Response 24-177976 / Cybersecurity Services <br />Statement of Work <br /> <br />Use or disclosure of this proposal is subject to the restrictions on the cover page. <br />Motorola Solutions Confidential Restricted <br /> <br />Page 2-2 <br />Phase 5: Tuning and Customer Training <br />Motorola Solutions will conduct initial tuning of the events and alarms in the service and ActiveEye <br />training. <br />2.2.2 General Responsibilities <br />2.2.2.1 Motorola Solutions Responsibilities <br />• Provide software and licenses to the Customer necessary to remotely monitor the ASTRO 25 <br />network and applicable CEN environments. <br />• Verify connectivity and monitoring is active prior to start of service. <br />• Coordinate with the Customer to maintain Motorola Solutions service authentication credentials. <br />• Maintain trained and accredited technicians. <br />• Monitor the Customer’s ASTRO 25 network and applicable CEN systems 24/7/365 for malicious <br />or unusual activity. <br />• Respond to security incidents in the Customer’s system in accordance with Section 2.3.6: <br />Priority Level Definitions and Notification Times. This may include, but is not limited to, <br />requesting additional information from the Customer, continuing to monitor the event for further <br />development or informing the Customer to enact the Customer’s documented Incident <br />Response plan. <br />• Ensure that all monitored devices within the network are properly configured for Syslog, <br />forwarding events to the centralized event log server. <br />• Assist the Customer with identifying devices that support logging within the ASTRO 25 network <br />and applicable CEN systems have been configured to forward Syslog events to the AERSS. <br />• Provide the Customer with access to the ActiveEye Security Management platform, so the <br />Customer can access security event and incident details. <br />2.2.2.2 Customer Responsibilities <br />• The ASTRO 25 Managed Detection and Response service requires a connection from the <br />Customer’s ASTRO 25 network and applicable CEN systems to the Internet. Establish <br />connectivity with sufficient bandwidth before service commences. Internet service bandwidth <br />requirements are as follows: <br />- Bandwidth throughput of 10Mbps per zone. <br />- High availability Internet Connection (99.99% (4 -9s) or higher). <br />- Packet loss < 0.5%. <br />- Jitter <10 ms. <br />- Delay < 120 ms. <br />- RJ45 Port Speed - Auto Negotiate <br />• Maintain an active Security Update Service (SUS) subscription, ensuring patches and antivirus <br />definitions are applied according to the release cadence of the service . <br />• For regional adders to another system, the hosted core (regional system) must subscribe to and <br />maintain either an ActiveEye Pulse or ASTRO 25 Managed Detection and Response service. <br />Docusign Envelope ID: AD07CE02-1F94-4496-ABD0-D61F9CBE562C