Managed Security Services

Purpose and Objectives The purpose of this engagement is to provide the New York Board of Elections with Vendor’s Pro Offering, a comprehensive Managed Security Service designed to deliver advanced monitoring, detection, response, and risk management across the environment. The objective is to: · Ensure 24x7x365 monitoring of entire environment. · Detect and respond to cyber threats in near real-time. · Provide measurable improvements in cyber resilience through AI-driven SOC automation, vulnerability management, and cloud security coverage. · Deliver reporting and governance aligned with NYBOE standards. Scope of Services Vendor’s offering includes the following services: 1. Sapphire AI Insights - Sapphire AI is the intelligent core of Vendor’s platform and next-generation AI, delivering autonomous investigation, decision-making, and response with over 98% accuracy. a. Sapphire AI gathers, analyzes, and correlates security data across all digital assets. Using advanced machine learning, it detects anomalies, prioritizes alerts, and applies context-driven intelligence to minimize false positives and mitigate risk in real time. b. Upon detecting a threat, Sapphire AI automatically triggers response playbooks. c. Sapphire AI delivers autonomous threat response, backed by Vendor’s 24/7 security team for expert guidance whenever needed—ensuring continuous protection with a human touch. 2. Sapphire AI SOC Analyst - Providing assistance with customer interactions and handling Tier 1 and 2 support. a. Sapphire AI SOC Assistant delivers a personalized customer experience, responding promptly to queries with natural language understanding and contextual awareness to provide accurate, relevant solutions. b. By analyzing user interactions, common issues, and FAQs, our team built an extensive knowledge base, ensuring that Sapphire AI delivers superior virtual assistance for seamless security support. 3. Vulnerability Scanning - Continuous vulnerability management, real-time protection, and rapid remediation. a. Vendor, in partnership with Nodeware, offers integrated vulnerability scanning to proactively identify all network assets and detect existing vulnerabilities, including IoT devices, with real-time monitoring and intuitive dashboards displaying critical issues. b. Vendor’s continuous scanning technology with low network utilization runs autonomously and silently behind-the-scenes, providing full internal and external coverage to detect vulnerabilities in real-time. 4. SIEM - AI-powered SIEM optimizes threat detection, investigation, and response. a. Data Log Management b. Real-Time Event Correlation c. Threat Intel Integration d. User Activity Monitoring e. Alerting & Notification f. Normalization 5. Cerulean XDR - Secures endpoints, networks, apps, and cloud with AI and top-tier threat intelligence. a. Extended Detection & Response (XDR) b. Endpoint Detection & Response (EDR) c. Next-Gen Antivirus (NGAV) 6. Cyber Risk & Posture Scoring - Identify gaps, monitor risks, and reduce cyber threats by 75%. a. Internal Risk Scoring with Best Practices b. External Risk Scoring – Security Scorecard Business enterprises awarded an identical or substantially similar procurement contract within the past five years: None Service-Disabled Veteran-Owned Business (SDVOB) This opportunity is reserved for SDVOBs only.