Acquisition of a virtual patching solution, implementation services and maintenance of said solution

The object of this contract is the acquisition, installation, configuration, integration, training and technical support of a comprehensive Virtual Patching (VP) solution for 400 devices that allows the Government of La Rioja to: a) Protect operating systems and applications without the need to apply traditional patches: By implementing host intrusion prevention technologies (HIPS) or similar that mitigate security vulnerabilities without altering the original software, especially in obsolete or critical systems that cannot be updated conventionally. b) Reduce the exposure surface to known and unknown threats: Applying updated security rules against documented vulnerabilities (CVE) and zero-day threats, preventing the exploitation of flaws at the network, operating system, or application level. c) Improve resilience against cyberattacks: Establishing an additional protection layer that acts preventively, blocking attack vectors before they compromise the integrity, availability, or confidentiality of information systems. d) Ensure regulatory compliance: Ensuring that the solution is compatible with the requirements established by the General Data Protection Regulation (GDPR), the National Security Scheme (ENS), and other sectoral regulations related to cybersecurity and the protection of critical infrastructures. e) Allow centralized and traceable management of applied protections: Through a single console that provides complete visibility of the security status of servers, with functions for auditing, report generation, and real-time security event monitoring. f) Facilitate integration into hybrid and heterogeneous environments: Allowing deployment in physical, virtual, and cloud infrastructures, and operation on current and old operating systems, including those out of support or with legacy software. g) Avoid restarts or interruptions in critical services: Allowing policies to be applied without needing to restart systems, maintaining the operational continuity of essential services and minimizing maintenance windows.