Hungary – IT Software Package – Development and Implementation of IT Security Systems

The main goal of the project is to strengthen the information security level of the MÁV-Volán Group through the development of the following key areas. Various information security developments will be implemented in parallel, complementing and reinforcing each other. 1. Establishing container vulnerability management for outdated systems: The project aims to provide a proactive vulnerability management system, such as Droplet or an equivalent solution, for the outdated systems of the MÁV-Volán Group, which protects these systems from external attackers by masking vulnerabilities. Additionally, the goal is to raise the security level of existing IT systems and prevent IT security incidents by reducing the attack surfaces of IT system components. 2. Implementation of a Privileged Access Management (PAM) system: The project aims to fully implement the One Identity Safeguard system for managing privileged user access, thereby reducing risks. The scope of the project includes: • All main network segments. • All Active Directory instances. • Server IT infrastructure elements in the main segments (operating systems, web servers, database servers, etc.), which are partially AD integrated, but also include non-AD integrated elements. • Critical non-AD integrated applications. 3. Extension of the Security Information and Event Management (SIEM) system: The project aims to implement the Logpoint SIEM system for the MÁV-Volán Group, which, alongside continuous analysis, is capable of real-time detection and processing of events from monitored systems according to best practices. Additionally, the goal is to raise the security level of existing IT systems by extending existing tracking methods, creating broader centralized logging, log analysis, and security incident management. 4. Implementation of a Continuous Threat Exposure Management (CTEM) system: The project aims to implement the Ridgebot Continuous Threat Exposure Management (CTEM) system for the MÁV-Volán Group, which, beyond regular vulnerability detection, is capable of tracking the lifecycle of identified vulnerabilities according to best practices. The project also aims to increase the security level of existing IT systems to prevent IT security incidents by reducing the vulnerability surfaces of IT system elements. The CTEM system must be able to operate in the specified infrastructural environment with the listed features.