ABMC MXDR Platforms

ABMC issues this Request for Information to determine the interests of companies to collaborate with ABMC to address the need of a Managed Extended Detection and Response (MXDR) platform. This platform should be cloud-based and AI-driven and provide ABMC with a robust Security Orchestration Automation Response (SOAR) capability. The platform should provide an advanced level of protection for ABMC's endpoints, networks, email systems, and cloud applications, and protect high-value, sensitive data to ensure regulatory compliance under federal and other security guidelines. The system should correlate threat data from various sources to include logs, events, processes, network traffic, and baseline deviations. The system should provide remote, end-to-end remediation for a myriad of security threats, to include ransomware, viruses, worms, phishing attacks, and other known threats. The platform should provide all pertinent information to agency IT representatives on a “Single Pane of Glass” to display real-time data from various applications and environments. The system should provide alerts on successful remediation and include details of attack, steps taken to remediate the attack, attribution of the attack, and recommended action for agency IT personnel to prevent such attacks in the future. The system should work with and/or integrate with known security tools such as ZScaler, Microsoft Defender, and other tools. Additionally, the MXDR system should have these capabilities: User behavior analytics Vulnerability Management Attack Surface Management Alert management and prioritization Sandbox analysis of malware Network containment of infected hosts Removal of malicious executables Blocking email of known-malicious actors Blocking IP address of known-malicious actors End-to-end remote remediation of threats Please see attached RFI for additional detail.