Regarding the request for providing quotes for centralized anti-malware solution services serving electronic medical records in 2026

Centralized anti-malware solution

200

Machine (License)/ Year

General Requirements: The centralized malware prevention and control solution is tasked with monitoring, detecting, and promptly preventing malware attacks, including both known (signature) and unknown (behavior) malware. Additionally, the solution allows for the identification and detection of threats on end devices and the management of device policies. Detailed Technical Requirements: I. Requirements for Service Standards and Capabilities The service provider must ensure the following service capabilities: - Provide a business license for information security products and services. - Provide a certificate of copyright registration for the software. II. Deployment Model: Overall Architectural Model Explanation of the overall system architecture model: - Workstations: These are computers, servers, and workstations within the hospital's internal network. Malware detection and removal software will be installed on these workstations. These software programs will send information about malware, malware removal history, new malware samples, and cybersecurity threat information to the Log Collector system via encrypted internet transmission. - Log Collector: This component collects logs from workstations in the hospital's internal network. This component is deployed on the service provider's cloud infrastructure and plays the role of log collection. ES Server: This component is deployed on the service provider's cloud infrastructure and functions to receive logs from Log Collector devices, store logs centrally, analyze, and correlate log sources. - Data transmission between Workstation and Log Collector: This data transmission uses IPsec-based encryption technology, creating a private connection between devices over the internet to transmit data securely and anonymously over public networks. IP-Section (Internet Protocol Security) is a set of security protocols that communicate over the Internet Protocol (IP) by authenticating and encrypting each IP packet of a data stream. VPN services act as a filter, making data unreadable at one end and decrypting it only at the other end. This prevents unauthorized use of personal data, even if the network connection is compromised. Dashboard: A comprehensive interface system that displays monitoring information, detects malware, and removes malware on workstations within the internal network. III. Functional Requirements General functional requirements - Detect, isolate, and remove various types of malware: viruses, ransomware, phishing, spam, etc. - Monitor events, processes, and analyze computer behavior to detect anomalies. - Control compliance with information security regulations on user computers. - Monitor the installation and use of permitted/unauthorized software. Receive real-time updates on the latest threats from the vendor's information security knowledge system - Real-time email alerts to administrators - Support for incident investigation and resolution; support for direct administration interaction and remote removal of malicious code - Ability to automatically update versions and agents - Software installed on user computers and administration software support the Vietnamese language. Request for Anomaly Monitoring Function: Information Gathering and Monitoring of Information Security Events: - Listing processes on the computer and promptly detecting abnormal processes - Listing network connections and detecting abnormal connections - Monitoring file creation on the system. Analysis and Alerting: - Detecting abnormal behavior on user computers - Allowing searching and investigation of event logs of all endpoints in the organization - Analyzing processes running remotely on the target machine - Providing alerts to administrators regarding anomalies across the organization's network - Allowing investigation and response through a single interface. Incident Response: - Supporting the temporary isolation of machines for investigation purposes. - Remote console access to the target machine for investigation and processing. Virus prevention and removal function requirements: The solution provides virus prevention and removal capabilities with the following functions: - Detecting, isolating, and removing various types of malware such as viruses, ransomware, phishing, and spam. - Controlling and protecting servers and workstations from software of unknown origin. - Real-time proactive protection. - Automatic scanning and filtering when file and folder changes are detected. - Scheduled or user-initiated virus scanning. - Controlling and protecting peripheral devices (external hard drives, USB drives, memory cards, etc.). Policy management function requirements: The solution allows users to manage computers on the network based on policies as follows: - Controlling compliance with the organization's information security policy at each end device. - Monitoring the use of licensed/unlicensed software on end devices. - Monitoring the connection and use of storage devices. External storage, USB drives, memory cards on terminal devices - Control the installation and use of unauthorized and mandatory software. Requires statistical information on malware and policy compliance. The solution allows for statistical reporting on malware and policy compliance as follows: - Statistics on software installed on user computers - Statistics on critical vulnerabilities that could become targets for hacker attacks - Statistics on detected anomalous events - Statistics on operating systems, licensed software, and unlicensed software within the organization - Statistics on policy compliance within the organization

Hiep Hoa General Hospital - Pho Thang Village, Hiep Hoa Commune, Bac Ninh Province