University of York - Security Information and Event Management (SIEM)

Description

The university requires a single solution for Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR) and Security Orchestration and Automated Response (SOAR) capability and the Elastic Search Cloud Security service provide the university with a single agent solution will analyse events on endpoints and provision and correlate logs from devices across the university's IT estate, providing the University with a real-time threat detection, incident response, compliance reporting and forensic analysis capabilities covering SIEM and EDR functions and allowing SOAR capability. Lot 1: The university requires a single solution for Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR) and Security Orchestration and Automated Response (SOAR) capability and the Elastic Search Cloud Security service provide the university with a single agent solution will analyse events on endpoints and provision and correlate logs from devices across the university's IT estate, providing the University with a real-time threat detection, incident response, compliance reporting and forensic analysis capabilities covering SIEM and EDR functions and allowing SOAR capability.