Co-Managed Security Solution

The City of York IT Department is exploring partnering with a party for a Co-Managed Cybersecurity Solution. Primary items to be included are as follows:

• Monthly Vulnerability Management – This service should include Vulnerability Management Licensing, review of Internal - External Vulnerability Scans and Recommendations for remediation by City of York IT staff as necessary.
• Proactive Cybersecurity Administration Assistance - Ensure technology is constantly aligned with best-in-class standards in terms of security and performance. Focus is on cyber security alignment with Center for Internet Security (CIS) framework v8.1, Implementation Group 1 (IG1) with the aim to meet Implementation Group 2 (IG2).
• 24x7 System Monitoring and Alerting for servers and critical network devices utilizing a Remote Monitoring and Management (RMM) cloud-based platform.
• Endpoint Detection and Response (EDR) - Antivirus & AntiSpyware Software licensing, monitoring, updates and maintenance.
• Cyber Security Training, Testing and Reporting for all end users, consists of an annual training video and test. End user data is reported for management review and further end user training.
• Monthly Cyber Security Phishing Testing and Reporting
• Dark Web Monitoring and Alerting – Continuous Dark Web Monitoring and Alerting for data breaches of credentials matching your domain name.
• Microsoft Patch Management – Monthly, Bi-Monthly or Weekly security patches, service packs and updates deployed after normal business hours and after evaluation.
• Other software updates – Adobe, Java, etc.