You are the cybersecurity tools-and-architecture lead. The CISO wants an AI copilot for the 8-analyst Tier 1 SOC. Three vendors are in contention. Each ships with a different integration model, pricing structure, and capability profile.
Vendor specs are summarized inline. The vendors are anonymized as Copilot A (an EDR-native copilot), Copilot B (a SIEM-native copilot), and Copilot C (a vendor-agnostic copilot). Annual contract values range from $180K to $420K.
This scenario tests procurement reasoning under information asymmetry. The right answer is rarely the cheapest, almost never the most capable, and depends on your existing stack and SOC maturity. Defend your call.
One ordered pass through every step. No clock. Each answer scores against the canonical solution.
Hints reduce the points you can earn for that step. Free-text steps queue for manual review.