Framework agreement for Splunk Enterprise Security Premier Edition

Summary

The tender concerns the continued operation, expansion and enhancement of IT.NRW’s existing on-premises cyber defence platform based on Splunk Enterprise Security. The aim is to add functions for detecting and defending against cyber threats and to automate as many tasks as possible so that security analysts in the Security Operations Center have the information and processes they need for rapid assessment, analysis and response. The required capabilities include UEBA, SOAR and automated Asset and Risk Intelligence (ARI).