Orange County NC Website
Browse       Search
Orange County August 8, 2024 <br />ASTRO 25 Managed Detection and Response 24-177976 / Cybersecurity Services <br />Statement of Work <br /> <br />Use or disclosure of this proposal is subject to the restrictions on the cover page. <br />Motorola Solutions Confidential Restricted <br /> <br />Page 2-6 <br />Table 2-1: Event Handling <br />Event Type Details Notification Requirement <br />False Positive or <br />Benign <br />Any event(s) determined by Motorola <br />Solutions to not likely have a negative <br />security impact on the organization. <br />None <br />Event of Interest <br />(EOI) <br />Any event(s) determined by Motorola <br />Solutions to likely have a negative security <br />impact on the organization. <br />Escalate to Customer in accordance <br />with routine notification procedure. <br />Escalate in accordance with urgent <br />notification procedure when required by <br />agreed-upon thresholds and SOC <br />analysis. <br />Notification procedures are included in <br />Table 2-2: Notification Procedures. <br />Notification <br />Motorola Solutions will establish notification procedures with the Customer, generally categorized in <br />accordance with the following table. <br />Table 2-2: Notification Procedures <br />Notification Procedure Details <br />Routine Notification <br />Procedure <br />The means, addresses, format, and desired content (within the capabilities <br />of the installed technology) for Events of Interest. These can be formatted <br />for automated processing, e.g., by ticketing systems. <br />Urgent Notification <br />Procedure <br />Additional, optional means and addresses for notifications of Events of <br />Interest that require urgent notification. These usually include telephone <br />notifications. <br />Motorola Solutions will notify the Customer according to the escalation and contact procedures defined <br />by the Customer and Motorola Solutions during the implementation process. <br />Tuning <br />Motorola Solutions will assess certain events to be environmental noise, potentially addressable <br />configuration issues in the environment, or false positives. Motorola Solutions may recommend these <br />be addressed by the Customer to preserve system and network resources. <br />Motorola Solutions will provide the Customer with the ability to temporarily suppress alerts reaching <br />ActiveEye, enabling a co-managed approach to tuning and suppressing events or alarms. The SOC <br />may permanently suppress particular alerts and alarms if not necessary for actionable threat detection. <br />Tuning Period Exception <br />The tuning period is considered to be the first 30 days after each service module has been confirmed <br />deployed and configured and starts receiving data. During the tuning period, Motorola Solutions may <br />make recommendations to the Customer to adjust the conf igurations of their installed software so <br />Services can be effectively delivered. Service Availability will not be applicable during the tuning period <br />and responses or notifications may not be delivered. However, Motorola Solutions will provide <br />responses and notifications during this period. <br />Docusign Envelope ID: AD07CE02-1F94-4496-ABD0-D61F9CBE562C