Key Tender Details

Important Dates

Scope of Work

The selected training provider will conduct offline professional training on SIEM and Log Analysis for 7 personnel. The scope includes delivery of the Certified Cyber Security Operations Analyst training programme, certification support, lab-based learning and practical exposure to SOC operations.

The training provider will be responsible for arranging a qualified trainer, setting up the required computer lab and hardware at DSCC Bhopal, supplying printed and soft study material, conducting hands-on lab exercises, providing feedback sessions and assisting candidates with the certification examination process.

The course is expected to cover SIEM fundamentals, log collection, log normalization, SIEM search and querying, correlation rules, security use cases, incident investigation, dashboards, reporting, threat intelligence integration, SOC automation and final lab assessment.

Training Coverage

The course curriculum includes the following major modules:

1. SIEM fundamentals and SOC operations
2. Log management fundamentals
3. Log sources including firewalls, servers, endpoints, IDS/IPS, VPN and cloud logs
4. SIEM architecture, collectors, forwarders, indexers, dashboards and correlation engines
5. Log formats and parsing, including syslog, JSON, CEF, LEEF, Windows logs and Apache logs
6. Syslog configuration and Windows log collection
7. Agent-based log forwarding and endpoint telemetry
8. Log normalization, filtering and noise reduction
9. SIEM search fundamentals and advanced search queries
10. Correlation concepts and correlation rule creation
11. Alert generation and alert tuning
12. Authentication monitoring, network monitoring and endpoint security monitoring
13. Web and proxy log analysis
14. Threat hunting basics
15. Incident analysis workflow, IOC-based detection and MITRE ATT&CK mapping
16. Timeline analysis and case management
17. Dashboard creation, reporting and compliance
18. Threat intelligence integration
19. SOC automation and playbooks
20. Final lab assessment and incident report preparation

Generic SIEM concepts may be mapped to tools such as Splunk, IBM QRadar, Microsoft Sentinel, ArcSight and similar SIEM platforms.

Pre-Qualification Criteria

The bidder should be a qualified training institute or professional training service provider with relevant experience in cyber security, SIEM, Log Analysis and SOC-related training. The firm must be an authorized training partner for providing SIEM and Log Analyst certification courses and must submit documentary proof of authorization.

The training provider should have experience in conducting similar training for government organizations, departments, institutions, Defence organizations, PSUs or enterprise clients. Relevant past purchase orders, experience certificates, completion certificates and previous supply or service orders should be submitted for technical evaluation.

The firm should also demonstrate capability to conduct offline training at the buyer’s premises and provide the required training hardware setup, study material and certification support.

Eligibility Criteria

Eligible bidders should meet the following requirements:

Financial Criteria

The GeM bid details mention minimum average annual turnover of ₹3 lakh for the bidder over the last 3 years. However, the ATC/quality requirement sheet also asks for documentary proof of turnover of approximately ₹15 lakh per annum. Bidders should verify the final applicable turnover requirement on the GeM portal before submission.

Audited balance sheets or a Chartered Accountant / Cost Accountant certificate should be uploaded to support turnover claims. If the bidder is less than 3 years old, the turnover for completed financial years after incorporation may be considered as per GeM conditions.

Tender Fee, EMD and ePBG

Required Table for SkillCouncils.com

Submission Guidelines

Bidders must submit their bid online through the GeM portal before the bid closing deadline. The tender follows a Two Packet Bid system, requiring separate technical and financial submission as per GeM process.

The technical bid should include all eligibility documents, certificates, compliance statements and proof of experience. Price-related information should not be included in the technical bid. Bidders should submit a clause-wise compliance statement clearly mentioning compliance or deviation, if any.

The bidder should upload all documents requested under the bid, ATC and scope of work. Any missing or incomplete document may affect technical evaluation. The bidder must also upload the ATC compliance table separately on the firm’s letterhead with compliance marked as Yes or No.

Document Checklist

Bidders should prepare and upload the following documents: