《云上、本地办公网络安全防控》

云上、本地办公网络安全防控

招标文件

项目编号:BIECC-23ZB0102

北京国际工程咨询有限公司

2023年4月

目录

第一章投标邀请.............................................................................................................................................5

一、项目基本情况.............................................................................................................................................5

二、申请人的资格要求（须同时满足）.........................................................................................................5

三、获取招标文件.............................................................................................................................................5

四、提交投标文件截止时间、开标时间和地点.............................................................................................6

五、公告期限.....................................................................................................................................................6

六、其他补充事宜.............................................................................................................................................7

七、对本次招标提出询问，请按以下方式联系。.........................................................................................7

第二章投标人须知.........................................................................................................................................8

投标人须知资料表.............................................................................................................................................8

投标人须知.......................................................................................................................................................12

一、说明...........................................................................................................................................................12

1.采购人、采购代理机构、投标人、联合体............................................................................................12

2.资金来源、项目属性、科研仪器设备采购、核心产品........................................................................12

3.现场考察、开标前答疑会........................................................................................................................12

4.样品...........................................................................................................................................................12

5.政府采购政策（包括但不限于下列具体政策要求）............................................................................12

6.投标费用....................................................................................................................................................15

二、招标文件...................................................................................................................................................15

7.招标文件构成............................................................................................................................................15

8.对招标文件的澄清或修改........................................................................................................................15

三、投标文件的编制.......................................................................................................................................16

9.投标范围、投标文件中计量单位的使用及投标语言............................................................................16

10.投标文件构成..........................................................................................................................................16

11.投标报价..................................................................................................................................................16

12.投标保证金..............................................................................................................................................17

13.投标有效期..............................................................................................................................................18

14.投标文件的签署、盖章..........................................................................................................................18

四、投标文件的提交.......................................................................................................................................18

15.投标文件的数量、包装和标记..............................................................................................................18

16.投标文件递交截止时间..........................................................................................................................18

17.投标文件的递交与接收..........................................................................................................................18

18.投标文件的撤回......................................................................................................................................19

五、开标、资格审查及评标...........................................................................................................................19

19.开标.........................................................................................................................................................19

20.资格审查..................................................................................................................................................19

21.评标委员会..............................................................................................................................................19

22.评标程序、评标方法和评标标准..........................................................................................................19

六、确定中标...................................................................................................................................................20

23.确定中标人..............................................................................................................................................20

24.中标公告与中标通知书..........................................................................................................................20

25.废标.........................................................................................................................................................20

26.签订合同..................................................................................................................................................20

27.询问与质疑..............................................................................................................................................21

28.代理费.....................................................................................................................................................21

第三章资格审查...........................................................................................................................................22

一、资格审查程序...........................................................................................................................................22

二、资格审查要求...........................................................................................................................................22

1

第四章评标程序、评标方法和评标标准.....................................................................................................25

一、评标方法...................................................................................................................................................25

1.投标文件的符合性审查............................................................................................................................25

2.投标文件有关事项的澄清或者说明........................................................................................................28

3.投标文件的比较和评价............................................................................................................................29

4.确定中标候选人名单................................................................................................................................30

5.报告违法行为............................................................................................................................................30

二、评标标准...................................................................................................................................................31

第五章采购需求...........................................................................................................................................35

1.项目概述.......................................................................................................................................................35

2.项目需求.......................................................................................................................................................35

3.服务内容.......................................................................................................................................................36

3.1云上网络安全防护服务...........................................................................................................................36

3.1.1云上系统监测...................................................................................................................................36

数据库安全审计服务..................................................................................................................................36

.1服务内容.............................................................................................................................................36

.2服务范围.............................................................................................................................................36

.3服务成果.............................................................................................................................................36

云主机日志管理服务..................................................................................................................................36

.1服务内容.............................................................................................................................................36

.2服务范围.............................................................................................................................................37

.3服务成果.............................................................................................................................................37

WEB安全监控服务......................................................................................................................................37

.1服务内容............................................................................................................................................37

.2服务范围............................................................................................................................................37

.3服务成果............................................................................................................................................37

云安全态势感知服务.................................................................................................................................37

.1服务内容.............................................................................................................................................37

.2服务范围.............................................................................................................................................37

.3服务成果.............................................................................................................................................37

流量回溯服务.............................................................................................................................................37

.1服务内容.............................................................................................................................................37

.2服务范围.............................................................................................................................................37

.3服务成果.............................................................................................................................................38

应用性能安全监测服务.............................................................................................................................38

.1服务内容.............................................................................................................................................38

.2服务范围.............................................................................................................................................38

.3服务成果.............................................................................................................................................38

3.1.2云上系统防护...................................................................................................................................38

网页防篡改服务..........................................................................................................................................38

.1服务内容.............................................................................................................................................38

.2服务范围.............................................................................................................................................38

.3服务成果.............................................................................................................................................38

云端APT防护服务......................................................................................................................................38

.1服务内容.............................................................................................................................................38

.2服务范围.............................................................................................................................................38

.3服务成果.............................................................................................................................................39

云主机防病毒服务......................................................................................................................................39

.1服务内容.............................................................................................................................................39

.2服务范围.............................................................................................................................................39

.3服务成果.............................................................................................................................................39

3.1.3云上系统常规服务...........................................................................................................................39

操作系统租用..............................................................................................................................................39

本地备份服务..............................................................................................................................................39

.1服务内容.............................................................................................................................................39

.2服务范围.............................................................................................................................................39

2

.3服务成果.............................................................................................................................................39

3.2系统安全运维服务...................................................................................................................................39

3.2.1风险识别...........................................................................................................................................39

业务系统配置检查.....................................................................................................................................39

.1服务内容............................................................................................................................................39

.2服务频次............................................................................................................................................40

.3服务成果............................................................................................................................................40

业务系统漏洞检查.....................................................................................................................................40

.1服务内容............................................................................................................................................40

.2服务频次............................................................................................................................................40

.3服务成果............................................................................................................................................40

业务系统代码测试.....................................................................................................................................40

.1服务内容............................................................................................................................................40

.2服务频次............................................................................................................................................40

.3服务成果............................................................................................................................................40

业务系统渗透测试.....................................................................................................................................40

.1服务内容............................................................................................................................................40

.2服务频次............................................................................................................................................40

.3服务成果............................................................................................................................................40

综合日志安全分析.....................................................................................................................................41

.1服务内容............................................................................................................................................41

.2服务频次............................................................................................................................................41

.3服务成果............................................................................................................................................41

3.2.2风险控制...........................................................................................................................................41

信息系统安全整改.....................................................................................................................................41

.1服务内容............................................................................................................................................41

.2服务频次............................................................................................................................................41

.3服务成果............................................................................................................................................41

3.2.3风险处置...........................................................................................................................................41

安全事件应急支撑.....................................................................................................................................41

.1服务内容............................................................................................................................................41

.2服务频次............................................................................................................................................41

.3服务成果............................................................................................................................................41

3.2.4持续保障...........................................................................................................................................41

外网服务.....................................................................................................................................................41

.1服务内容............................................................................................................................................41

.2服务频次............................................................................................................................................42

.3服务成果............................................................................................................................................42

NW服务........................................................................................................................................................42

.1服务内容............................................................................................................................................42

.2服务频次............................................................................................................................................43

.3服务成果............................................................................................................................................43

安全防护措施检查服务.............................................................................................................................43

.1服务内容............................................................................................................................................43

.2服务频次............................................................................................................................................43

.3服务成果............................................................................................................................................43

3.2.5安全检查...........................................................................................................................................43

终端敏感信息检查.....................................................................................................................................43

.1服务内容............................................................................................................................................43

.2服务频次............................................................................................................................................43

.3服务成果............................................................................................................................................43

信息安全迎检检查辅助.............................................................................................................................43

.1服务内容............................................................................................................................................43

.2服务频次............................................................................................................................................43

.3服务成果............................................................................................................................................44

4.项目总体要求...............................................................................................................................................44

4.1项目总体目标........................................................................................................................................44

4.2项目原则................................................................................................................................................44

3

4.3项目依据................................................................................................................................................45

4.4对服务商及其团队人员的要求............................................................................................................46

4.5服务保证................................................................................................................................................47

5.项目服务要求...............................................................................................................................................49

6.项目验收.............................................................................................................................