F. Project Schedule and Timeline

from Security Operations Center (SOC) Technical Proposal

E. Roles and Responsibilities

 The customer will provide needed assistance and support means, where required, to allow Data Consult to fulfill the service requirements as per the

SOW in this proposal.

Prerequisites

 The customer must already have prepared the required Hardware equipment to install the SOC systems to be provided as per the minimum requirements provided by Data Consult.  The customer should provide valid licenses of the proposed systems (SIEM, EDR, SOAR, Ticketing System, Hypervisor, OS, etc.) for the duration of services contract, and the required infrastructure for storage and backups.  The customer should provide valid SIEM license for the duration of services contract, and the required infrastructure for tickets storage.  Designated infrastructure to be monitored must have an active and functional Endpoint Detection and Response system.  Stable Network Connectivity between the Data Consult Managed

SOC, the customer and the designated infrastructure to be monitored.  The customer should install in place a suitable setup for the remote connection of Data Consult team, through a secure and monitored

VPN tunnel with MFA allowing the SOC team to reach a hypervisor for central access (such as CITRIX).  For remote incident response services, the customer should provide and deploy, with the advice and guidance from Data Consult,

Velociraptor master server with the SOC infrastructure (usually required a mid-tier server for deployment. Velociraptor is an opensource solution used for forensics and incident response at a scale.

The master server will be connected to tenants on client premises whenever an incident response process and forensics activities are carried.