G-CLOUD 7 SERVICES

1.3.2.4 Lot 4 Specialist G-Cloud Services Service ID 7074 2623 9719 0576 refers for the provision of Splunk Enterprise Security Solution as follows (and not limited to): • Requirements consolidation • Architecture design planning • Agreeing deliverables • Implementation planning • Advise and assist with the implementation of the Splunk Enterprise Security solution • Tuning of alerting; reporting and correlation to provide the most effective SIEM capability and also deliver DfE/Cabinet Office specific Protective Monitoring requirements (e.g. PSN GPG13) • Integration with other security products aligning with the DfE Enterprise Security Strategy (e.g. Identity Management; Identity Access Management; Threat & Vulnerability Management; Incident Management (ServiceNow); Anti-virus etc.) • End-User and selective expert user training of DfE Security Operations Team on the use of Splunk Enterprise Security Solution.