|
It Services: Consulting, Software Development, Internet And Support – Framework Agreement For Support In The Area Of It Security. A Framework Agreement Is To Be Concluded Between Ib.Sh And Three Service Companies. The Framework Agreement Regulates Assignments That Are Carried Out By Ib.Sh On The One Hand And Include The Following Services: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Job Description: • Supporting The Client In Technical And Technical-Organizational Matters Of It Security / Cyber Security Based On The Strategies, Policies, Roles And Responsibilities Specified By The Client; The List Of Services Is Not Exhaustive. • Development, Specification, Updating And Monitoring Of Technical It Security Standards, Technical Specifications, Operating Processes, Runbooks And Implementation Guidelines Within The Framework Of Existing Internal Specifications. • Risk-Based Assessment, Classification And Implementation Support Of Technical It Security Requirements From Operations, Change Management, Projects, Architecture, Service Provider Management, Regulatory Requirements And Internal Guidelines. • Support With Technical It Security, Digital Operational Resilience, Restart And Recovery Capability And Continuity Of Critical It Services, Including Technical Input On Scenario Analysis, Emergency Exercises, Backup Procedures, Fallback/Exit Scenarios And Action Tracking. • Initiate, Assess, Implement And Track Operational Security Measures For It Infrastructures, Applications, Platforms, Endpoints And Operating Environments, Including On-Premises, Private Cloud, Public Cloud, Hybrid Cloud, Multi-Cloud And Saas/Paas/Iaas Environments. • Coordination, Evaluation And Further Development Of Technical Security Architectures, Among Other Things. Network And Zone Concepts, Segmentation, Firewalling, Encryption, Pki, Dnssec, Proxy/Gateway Services, Iam/Pam, Endpoint Security, Server/Client Hardening, Cloud, Container/Kubernetes And Api Security As Well As Secure Administration Models. • Initiating, Supporting, Evaluating And Tracking Vulnerability Analyses, Penetration Tests, Technical Security Reviews, Configuration And Hardening Tests, Readiness Checks As Well As Red/Purple Team Or Comparable Technical Security Exercises. • Observation And Evaluation Of External Reports On Vulnerabilities, Threats, Attack Patterns And Security-Relevant Industry Developments As Well As Derivation, Support And Documentation Of Technical Measures. • Support With Security Monitoring, Logging, Detection And Response, Especially With Siem/Soc Requirements, Log Source Onboarding, Use Case Design, Alert Tuning, Detection Engineering, Soc Provider Control, Triage Processes, Playbooks, Escalation Paths And Security-Related Reporting. • Technical Support For Treatment, Containment, Analysis, Documentation
|
