Terms of Service

The ICT Cybersecurity Portal is the working platform of the ICT Cybersecurity function at PT Pertamina Bina Medika IHC. It is used to report security incidents, submit change requests, take online training, record event attendance, and register accounts.

This portal is not a medical service channel and not a patient complaints channel. Concerns about healthcare services go through the official channels of the hospital or unit involved.

The working pages are for IHC employees who have been registered as portal users. Signing in to those pages uses your IHC account through Entra ID.

Some services are open without an account: reporting an incident, and tracking a submission by its ticket number. Submitting a change request requires an IHC account because every submission is filed under the requester's name.

Partners and third parties are granted access only after their account registration is approved, and only as far as their work requires.

Use your own account. Accounts must not be lent, shared, or handed to anyone else — including colleagues in your own unit.

Report and submit truthfully. A fabricated incident report consumes response time that belongs to a real event.

Do not upload patient data, medical records, or other people's personal data unless it is genuinely needed to handle the incident being reported.

Do not probe, scan, or test this portal's defences without written permission from ICT Cybersecurity. Security testing has its own route through the Vulnerability Assessment service.

Tell us straight away if you suspect someone else is using your account.

Reports, submissions, documents, and attachments you send are kept as ICT Cybersecurity working records, and may be used for handling, audit, and — where required — reporting to the authorities.

You remain responsible for the accuracy of what you send and for your right to share it.

We aim to keep the portal available at all times, but it may be taken down without notice for maintenance, incident handling, or other security reasons.

If an incident is happening right now — services down, data leaving, devices locked — reach the team through the internal channel rather than waiting for a reply to a form.

Access may be suspended if an account is used outside these terms, if its owner no longer works within IHC, or if suspension is needed to stop an incident in progress.

These terms may change as the service and the regulations around it change. The effective date is shown at the top of this page; using the portal after that date means the new terms apply to you.