SCOPE OF WORK / DUTIES / ROLES

The Contractor will provide the services as part of an existing team of people supporting the NCIA CSU Brunssum Cyber Security Section Services contributing to the following activities and duties:

• Review the events reported by the monitoring software and appliances;
• Collection of relevant evidence in case of incident;
• Monitoring of outbound email traffic;
• Monitoring of inbound email traffic;
• Monitoring of unauthorised device connected to the networks;
• Monitoring of potential CIS/IT security violation;
• Monitoring of ICS/SCADA/EKS/Access Control Systems;
• Monitoring of email security portal;
• Monitoring of Traka Key System;
• Monitoring of BRI Access Control System;
• Integrity Check for Security Seals;
• Intrusion Detection Systems;
• Review of network event logs;
• Review of computer event logs;
• Review of infrastructure logs;
• Assistance in Data Transfer (not classified inbound/outbound);
• Assistance in Malware Data Analysis (first line response);
• Assistance to NCSC requests for investigation (first line response);
• Apply procedures in accordance with NATO Rules, Policies and Regulations to ensure strict control of classified items whenever operational requirements necessitate that material being destructed or disposed, on daily basis;
• Contractor provided support individual can be part of the Chain of Custody for equipment provided for Forensic Investigation on event basis.