SELECTION OF BACKEND PARTNER FOR COMMISSIONING OF CYBER SECURITY SOLUTION FOR NATIONAL CRIME RECORD BUREAU NCRB

Sr.No. Product Name Quantity UOM Form Factor Unit Cost Total Cost

Cyber Security Solutions – Hardware/Software

1 Router 10 GBPS (HA Pair) 2 No Hardware

2 HA Pair Firewall, 15 Gbps 4 No Hardware

3 HA Pair 48-Port L3 Core Switches with Latest Features Full Loaded Switch with SFP 2 No Hardware

4 HA Pair 48-Port L3 Distribution Switches with Latest Features Full Loaded Switch with SFP 2 No Hardware

5 Access Layer Switch 48 Ports (L2 Cluster) Full Loaded Switch with SFP for Servers and users switch 19 No Hardware

6 OOB/Management Switch 48 Ports 1 No Hardware

7 Silver-Grade 2-Socket Server, 32 Cores, 512 GB RAM 10 No Hardware

8 Silver-Grade 2-Socket Server, 16 Cores, 128 GB RAM 2 No Hardware

9 400 TB NAS Appliance (10 TB Hot / 390 TB Cold), RAID 6 1 No Hardware

10 500 TB Object Storage for Backup (50 TB Hot / 450 TB Cold) 1 No Hardware

11 SIEM 10000 EPS 1 No Software

12 SOAR 1 No Software

13 Endpoint DLP 500 No Software

14 rsyslog Server (Opensource) 1 No Software

15 NAC Appliance with AAA (HA) 2 No Hardware

16 Patch Management Server 500 Endpoints and 100 VM (RHEL, Windows and Mac) 1 No Software

17 PAM & PIM((Privileged Access Management) and Privileged Identity Management) (for 100 VM) 1 No Software

18 Cyber Threat Intelligence (CTI) 1 No Software (SAAS)

19 Network Management System (NMS) 1 No Software

20 Windows 2022/2025 STD 16 Core 40 No Software

21 RHEL 9.5 1-2 Socket Lic Virtual 1 No Software

22 Rack 42U (1 Server, 1 Network eqpt., 1 storage) 3 No Hardware

23 12U Rack 6 No Hardware

24 High-end PC (i7/32 GB/1TB NVMEs) 6 No Hardware

25 AIO Desktop (i7, 13 Gen or Higher) 350 No Hardware

26 Patch Cord 2 Meter 400 No Hardware

27 Patch Pannel 24 Ports 22 No Hardware

28 Bundle Cat 6 A Shielded 3 No Hardware (The quantity is indicative and may be vary as per requirement)

24/7 SOC/NOC Services (Onpremises model)

29 L1 resources – SOC (24x7x365) 4 No

30 L2 Resources SOC(8x5) 1 No

31 L1 Resources NOC (24x7x365) 4 No

32 L2 Resources NOC (8x5) 1 No

33 L3 Resources -NOC & SOC (24x7Remote Support) 2 No

34 Training – 2 weeks for overall solutions 1 No

35 Security Audit Services 1 Set The duration of training is indicative and may be increased as per requirement

36 Cyber Security Assessment/VAPT for a year (IT Infra of NCRB) 3 Yearly

Note:  Please Note That All the Hardware’s and Software’s Should Be Strictly “NTRO Approved Specifications” Only.  If solution is in the form of software, then the server hardware will also be supplied along with the solution.  Storage hardware will be supplied for SIEM/SOAR for storing the logs for 365 days.  Qty mentioned in table is indicative, if offered solution has some of the offered products as integrated part of other products, the same may not be quoted separately, viz. WAF may be integrated with NGFW.  The detailed specifications of these devices are given in Annexure ‘A’.  All the network devices need to be hardened as per the minimum baseline device hardening measures specified in Annexure ‘B’. These listed measures are indicative and not exhaustive. Final measures adopted for hardening of all devices will be decided based on consent of NCRB management.  The entire SOC/NOC setup should have the minimum baseline capabilities specified in Annexure ‘C’. The listed requirements are indicative and not exhaustive. Final requirements will be decided based on consent of NCRB management. The detailed specifications & other requirements of the devices to be deployed in NOC/SOC setup are already given in Annexure ‘A’.  All ICT equipment must be manufactured within one year prior to the project implementation date.  As NCRB is already in possession of an active license for the Antivirus and Backup solution, the same has not been included in the present Bill of Quantities (BOQ) proposal.  Automatic ingestion of threat intelligence feeds into SIEM and Next-Generation Firewalls (NGFW) from NCIIPC, NTRO, and the Threat Dissemination Platform (TDP).  Servers, storage systems, desktops, and workstations must be supplied by the same OEM.  The OEM must maintain authorized service centers in all major metropolitan cities of India.  Each OEM shall ensure the provision of the highest level of technical support.  The manpower duration for SOC and NOC shall be specified for a period of three years. The personnel will be deployed across shifts as per point L & M.  Networking and OS hardening activities, along with package installation for application deployment, will be carried by the vendor.  The scope of audit is specified in point K. The vendor will also assist in patching audit issues related to the network and infrastructure, excluding application development and database optimizations.  For the SOC & NOC, vendor will provide 24×7 on-site L1 coverage at the NCRB office, L2 coverage during business hours, and 24×7 remote L3 support.  The edge NGFW and the internal NGFW will be sourced from different OEM’s, thereby enhancing supply-chain resilience and technology diversity.  Dedicated NTP Server setup along with backup setup will be done/provided by vendor.  The vendor will configure a RHEL-based rsyslog server to collect logs from CCTNS and other critical applications and forward them to the primary SIEM.