Provision of an Extended Detection and Response (XDR) System

The new solution should be able to provide the Department with the ability to:

• Prevent, detect and contain malware on endpoints
• Perform investigations and respond both manually or automatically
• Collate all related endpoint telemetry, network traffic logs and other threat intelligence sources to provide searchable data into a unified view
• Use machine learning analysis to identify and respond to incidents as they occur
• Control and monitor data being transferred to USB devices or printers
• Whitelist applications running on all endpoints

The new solution should complement the Department's existing cyber security systems through being highly configurable so that it can integrate with existing cyber security systems and providing functionality to address security gaps.