Lynn:

Thank you for the fast response.

Here are the answers to your questions:

What do you expect them to do if alerts fire?

Resolve the issue.

What type of response time will the individual or company have to respond to those alerts?

There is no defined response time other than what is considered reasonable.

What actions are they to take?

Do they simply report them to you and you deal with the issue(s) or do they respond and deal with the issues?

They will be responsible to fix all issues that come up, apply patches, and keep best practices.

You said maybe 2 hours per day. Could you provide me with some idea as to what they would do during the two hours and why they would have to spend this time each day?

Thanks