This is a voluntary ex ante transparency (VEAT) notice. This notice acknowledges that the Royal Victoria Eye & Ear Hospital Dublin proposes to contract with Tangerine technology for the provision of a full and complete 24/7 Managed Detect and Response cyber security solution (3 year term)

This is a voluntary ex ante transparency (VEAT) notice. This notice acknowledges that the Royal Victoria Eye & Ear Hospital Dublin proposes to contract with Tangerine technology for the provision of a full and complete 24/7 Managed Detect and Response cyber security solution (3 year term). There is no current solution in place and as such the hospital is 100% reactionary to cyber threats. The RVEEH do not have the staff or experience to interpret all security logs and events to ensure all systems, including legacy systems that cannot be secured are monitored and safe. Currently, Tangerine Technology manages our firewalls, endpoint security, and network access control. This includes configuring and monitoring security rules governing internal and external communication, updating policies weekly, and maintaining hardware and licensing. Such comprehensive management ensures continuity during hardware failures and critical incidents. An MDR solution's effectiveness hinges on seamless integration with existing infrastructure and operational processes. Given our legacy systems—spanning 100 VLANs and over 70 virtual, physical, and remote services. They possess intimate knowledge of the network’s topology, including interdependencies, data flows, and legacy constraints. Key reasons for remaining with Tangerine Technology: Operational Continuity and Legacy System Knowledge: Tangerine has developed a detailed understanding of our infrastructure over years, enabling nuanced decision-making to balance security needs and operational stability. Their familiarity with critical legacy systems minimizes the risk of disruptive actions (e.g., service interruptions due to false positives). Integrated Security Approach: The unified management of firewalls, endpoint security, and NAC by Tangerine reduces interoperability challenges. An MDR solution built on this existing foundation ensures optimal visibility across all systems. Leveraging this single-source partnership allows consistent monitoring of security logs and faster detection of anomalies across all layers of the network. Mitigating Risks of Transitioning to a New Supplier: Onboarding a new MDR provider would involve significant learning curves, increasing the risk of misconfigurations or delays in addressing threats. The interconnected nature of our systems and data flows demands a partner who already understands our environment, ensuring immediate and effective incident response. Proven 24/7 Support: Tangerine’s 24/7 support desk ensures rapid response in the event of a security incident, further reducing downtime and potential impacts. Their experience handling our specific ecosystem is critical during high-pressure situations. Switching to an alternative supplier would not only undermine our current security posture but also introduce risks inherent to unfamiliarity with our intricate network. Maintaining Tangerine Technology as our MDR provider guarantees a well-integrated, resilient, and future-proof solution aligned with our operational needs.