CEFTA Cloud Infrastructure, Hosting, Managed Services, Security and Business Continuity

… CEFTA’s infrastructure, systems, applications, and data, in line with industry best practices and applicable security, compliance, and governance requirements. The scope includes infrastructure and platform administration, performance monitoring and tuning, capacity planning, availability management, patch and configuration management, incident, problem, change and release management, and service request fulfilment. The contractor shall provide a combination of proactive and reactive operational support. Proactive services will include continuous monitoring, preventive maintenance, performance and capacity management, security assessments, vulnerability management, patching, security hardening, resilience improvements, cost optimisation, compliance support, and recommendations for continuous service enhancement. Reactive services will include incident response, troubleshooting, service restoration, problem resolution, emergency remediation activities, security incident handling, and support for unplanned events affecting the availability, performance, integrity, or security of CEFTA systems and services. The contract will also include security monitoring, threat detection, cybersecurity risk assessments, vulnerability remediation, backup management, disaster recovery planning and testing, business continuity planning and validation, data protection measures, recovery readiness activities, cloud cost management, infrastructure lifecycle management, operational reporting, service-level performance tracking, documentation maintenance, knowledge transfer, and technical and architectural advisory services, ensuring alignment with CEFTA’s operational, security, and strategic business objectives while maintaining the confidentiality, integrity, availability, and recoverability of CEFTA information assets and digital services.