Internal Network Security Monitoring Solution

Lansing Board of Water and Light

Buyer seeks an Internal Network Security Monitoring (INSM) solution to comply with NERC CIP-015 requirements. The solution will be implemented within the controlled environment of buyer's Medium Impact Advanced Distribution Management System and Low Impact Generation Plants. Buyer is seeking baseline quotes and potential vendor partners for this INSM solution project.

• 3/14/2025 - Issue Date
• 3/31/2025 - Questions Deadline
• 4/4/2025 - Proposal Due Date

• Implement network data feeds to monitor network activity
• Detect anomalous network activity using data feeds
• Evaluate detected anomalous network activity
• Retain internal network security monitoring data
• Protect internal network security monitoring data from unauthorized deletion/modification
• Provide options for storing short-term and long-term PCAP data
• Monitor traffic between virtual machines in virtualized environments
• Integrate with third-party tools like Splunk and Tripwire
• Provide on-premises solution with redundant power supplies
• Offer regular software updates and support