To ensure that we are in line with industry best practices; we are looking for a solution(s) that will support the following capabilities: • Detection of ransomware through behavioral analysis of suspicious activities and attack patterns rather than solely relying on known signatures or Indicators of compromise (IOCs).[HM1.1][LA1.2] • Containment capabilities including the automatic isolation [HM2.1][LA2.2]of affected endpoints to prevent further spread of malicious activity across the environment. • Response and investigation • Recovery[HM3.1][LA3.2] • Monitoring and alerting • Reporting • Automation • Platform Architecture • Endpoint agent • Management Console / Dashboard • System Requirements • Integration with IE’s SIEM.[HM4.1][LA4.2] • User and access management • Compliance and audit • Deployment and support