Network Detection and Response Platform

British Columbia agencies are seeking a vendor to provide a comprehensive network detection and response (NDR) platform. The desired solution will deliver continuous analysis of network traffic, enabling identification of sophisticated threats, insider risks, and advanced attacks that may bypass traditional, signature-based security controls.

Key requirements include unified threat visibility across on-premises infrastructure, cloud workloads, and endpoint systems, allowing for detection of lateral movement within the agency's network. The platform should establish and maintain behavioral baselines for users, devices, and entities, supporting the detection of anomalous activities such as unusual authentication attempts, abnormal data transfers, deviations from typical entity relationships, and instances of privilege misuse or policy violations.

Additionally, the NDR solution must offer automated investigation capabilities to correlate multiple, subtle anomalies over time and across systems, improving detection of complex attack campaigns. Autonomous response functions are also required, enabling the system to contain threats proportionally while maintaining business continuity. Full visibility into internal network communications, including traffic between different segments, is essential. Interested vendors are to submit their questions by January 19, 2026.