2024-706-E-Emergency Svc-Motorola Solutions-PSC Radio System Service Maintenance

Browse Search

Orange County August 8, 2024 ASTRO 25 Managed Detection and Response 24-177976 / Cybersecurity Services Statement of Work Use or disclosure of this proposal is subject to the restrictions on the cover page. Motorola Solutions Confidential Restricted Page 2-5 Customer Responsibilities • Provide sufficient information to allow Motorola Solutions technical support agents to diagnose and resolve the issue. Limitations and Exclusions Technical support is limited to the implementation and use of the ActiveEye Security Management platform and does not include use or implementation of third -party components. 2.3.4 Incident Response An Indicator of Compromise (IoC) is an observable event that Motorola Solutions Security Analysts have determined will jeopardize the confidentiality, integrity, or availability of the system. Examples of IoC include ransomware or malicious use of PowerShe ll. When an IoC is observed by the Security Analyst, Motorola Solutions and Customer will be responsible for the tasks defined in the following subsections. Motorola Solutions Responsibilities • Upon the identification of an IoC, notify the Customer's documented contact and initiate the escalation plan. • Take documented, Customer approved actions in an attempt to contain an IoC to the extent enabled via Motorola Solutions managed technology. Communicate to the Customer any additional potential containment actions and incident response resources that can be taken across the Customer’s managed IT infrastructure. • Perform investigation using the ActiveEye Managed Detection and Response integrated and enabled data sources in an initial attempt to determine the extent of an IoC. • Document and share IoC and artifacts discovered during investigation. Motorola Solutions services exclude performing on-site data collection or official forensic capture activities on physical devices. Customer Responsibilities • Maintain one named PoC to coordinate regular team discussions and organize data collection and capture across the Customer and Motorola Solutions teams. • If determined to be required by Customer, contract an Incident Response service provider to perform procedures beyond the scope of this Agreement such as forensic data capture, additional malware removal, system recovery, ransomware payment negotiation, la w enforcement engagement, insurance provider communications, identify patient zero, etc. 2.3.5 Event Response and Notification Motorola Solutions will analyze events created and/or aggregated by the Service, assess their type, and notify the Customer in accordance with the following table. Docusign Envelope ID: AD07CE02-1F94-4496-ABD0-D61F9CBE562C