2026 - EEA System for monitoring and event management (MDR) - Qualification part

Askøy and Øygarden municipalities shall procure a general, 24 hour (24/7/365) MDR service for proactive security monitoring and support for handling IT security incidents. The service shall reduce the time from a security incident occurring until it is discovered, assessed, notified and handled, and give municipalities qualified and prioritised events over untreated alarms. Tenderers shall ensure security monitoring, detection, notification and partly handling of events and vulnerabilities. In the event of major security events, the municipalities shall be able to quickly get assistance from an IRT team with relevant expertise. Events and vulnerabilities shall be dealt with in cooperation with the municipalities and, when necessary, in the municipalities' infrastructure. The service shall be provided as a managed cloud service and function in heterogeneous and changing IT environment, independent of specific products and manufacturers. The municipalities shall not have to establish or operate comprehensive local SOC, SIEM or log infrastructure. The contracting authority emphasises that conditions can occur in negotiation meetings that lead to changes in the competition documents. The following municipalities, including their municipal companies - and AS have an option to join the contract. Kvam heradUlvik kommuneEidfjord kommuneVoss heradDette is described in "Konkurranseregler" section 1.4.1