Managed Security Services

2026-11-03

The service includes Managed Detection and Response, Security Information and EventManagement, Endpoint Detection and Response supported by Next GenerationAnti?Virus, identity monitoring, cyber threat intelligence, threat hunting, cyber maturityassessments, efficiency testing and full incident response readiness. These capabilitiescollectively enable the proactive identification, investigation and mitigation of threatsacross the GSA's digital environment.Managed Detection and Response (MDR). Enterprise data will be captured and analysedfor indicators of attack or compromise, which, if discovered, shall initiate a first response.This response will be either automated or human, depending on the source of thedetection. GSA require Level 1 and 2 support, and the first one hour of any Level 3investigations. Support levels are defined below.Level 1The first line of security analysts who manage security tools and run regularreporting. At this level, alerts and alert urgency will be determined by the securityteam. Decisions about escalation to Level 2 will also be undertaken at this level.Level 2The second line of security analysts / engineers who have the expertise required toget to the root of a problem and assess which part of the enterprise may becompromised. Remediation and repair of problems is expected and issues foradditional investigation will be highlighted.Level 3The third line of security engineers / incident responders, which consists of highlyskilled technical resource. If required, personnel will use advanced detectionmethods (threat hunting) to identify and neutralise the threat, providing remediationadvice to the Client's IT team.Key deliverables:- Managed Detection and Response (MDR) Serviceo 24/7x365 Threat Detection & Responseo Ongoing Detection Engineeringo Ongoing Use Case Developmento Cyber Threat Intelligence (CTI)o Threat Huntingo Cyber Maturity Assessmento Incident Response (first 1 hour of IR)o Dedicated Customer Success Manager- SIEM Licensing (Splunk) 100GB- CrowdStrike EDR Licensing with Falcon Mobile (1650 endpoints)

United Kingdom (UK)

2026-06-23