La Caisse Marocaine de Retraite (CMR) has launched an open international tender for security solutions to protect workstations, servers, identities and uses of artificial intelligence. Bids will be opened on November 24. The estimated cost of the services is MAD 1,999,800, and the execution period is 90 days.
The fund cites the constant evolution of cyberthreats and the emergence of new risks linked to AI technologies, which require stronger capacity for prevention, detection, investigation and response. It says it has a strategy to protect its information system and ensure compliance with Law 09-08, the national information systems security directive, Law 05-20 and the ISO 27001 standard.
The CMR wants an integrated security platform with three components. The first is identity threat detection and response, to improve visibility of identities and authentications, protect privileged accounts and detect abnormal behavior and attack techniques targeting Active Directory environments. The second is detection and response for workstations and servers, to improve the collection and analysis of security telemetry. The third addresses AI-related risks, to improve visibility and control of AI use, detect risky activity and protect users, devices and data.
The components must be integrated with the existing security ecosystem, notably supervision, detection and response tools, to give a global and contextualized view of threats. The contract covers supply, implementation, integration, configuration and commissioning. The supplier must guarantee the installed solutions for three years from provisional acceptance.
On the location of telemetry data, under rules set by the General Directorate for Information Systems Security and the law on cybersecurity, sensitive data must be hosted in Morocco. Where a cloud provider is not based in the country, infrastructure abroad is accepted provided the host country offers a level of protection consistent with Moroccan legislation.