OsloMet plans to enter into a contract for security monitoring services (SOC). The objective of the RFI is to: • Avoid erroneous or inappropriate requirements. • Uncover and correct uncertainties. • Use competence in the supplier market. • Reduce the risk for both the contracting authority and suppliers. • Better goal achievement in the procurements and learning in their organisation. Background: OsloMet would like to strengthen monitoring and immediate response to events in our systems and network, by acquiring a 24/7/365 SOC service. Scope: As a starting point, we would like to reuse licenses in our Azure/M365 portfolio to the greatest possible degree, as well as the security products associated with them (Defender + Sentinel products). In addition it is a prerequisite that the data processing occurs in such a way that OsloMet retains historical data over time, also when the supplier is changed. OsloMet would like input on the following: - Will the questions and requirements answer the overall description? - Can you provide such a service with the set or easily adapted requirements? What notes do you have regarding the requirements? Has OsloMet set the right requirements to get a system that covers the need? - Are there requirements that are unnecessary growing? - What competence should be emphasised in the team that shall support OsloMet and what ought to be a minimum requirement? - Since OsloMet has never used a SOC service. Are there requirements that have not been set that should have been made? Link to requirement specifications/needs description: https://hioa365-my.sharepoint.com/:b:/g/personal/elisemf_oslomet_no/IQBtQIEXfarnQYp2fD8M6nI-AWJkdDK0A6-i86XSqFqwH-I?e=zBxTF9 Link to the price form: https://hioa365-my.sharepoint.com/:x:/g/personal/elisemf_oslomet_no/IQB6AqwR0YGnSLKokt948pzrAR7pxzvfmN3txhMU4Pouzlc?e=YEBkKc Deadline for replying: 26.05.2026 (12:00) Send replies to: elisemf@oslomet.no and mark the subject field with "Reply to RFI - OsloMet".