ICT Cybersecurity Service

Opening, changing, or closing firewall rules between network zones. Each request is reviewed against business need and least-privilege before it is applied.

Adding, changing, or removing DNS records on IHC-owned domains, including ownership records so no dangling entry can be taken over by someone else.

Allowing or blocking sites and categories on the web filter and proxy, together with a review of the stated business need.

Tuning WAF rules for published applications, including false positives that get in the way of day-to-day work.

Opening or closing USB port access on work devices, with a recorded validity period and reason.

Publishing an internal application or service to the public network through NAT and a reverse proxy, preceded by a security readiness check.

Installing the endpoint protection agent on new or unprotected devices and enrolling them in the central console.

Excluding files, folders, or processes from endpoint scanning for applications that are disrupted, kept as narrow as possible and reviewed periodically.

Monitoring security logs and alerts from IHC devices, servers, and applications, with follow-up on the alerts that point to a real problem.

Collecting threat indicators, distributing them to security devices, and hunting for their traces across the IHC environment.

Tracking IHC credentials that surface in third-party data leaks, then notifying the account owners so they can change their passwords.

Receiving, investigating, and handling security incident reports — phishing, malware, data leaks, and other suspicious activity — through to closure and record.

Testing applications, servers, and network devices for vulnerabilities, with a risk-ranked findings report and support until the findings are closed.

Measuring a unit's security maturity against the framework IHC uses, together with a roadmap for improvement.

Running security awareness training and materials for staff, including the online classes on this portal and their certificates.

Sending simulated phishing email to gauge staff readiness, followed by coaching for those who clicked.

Drafting and maintaining IHC information security policies, standards, and procedures, and distributing them to the units.

Advising on the security side of projects and new system procurement, from design through to just before go-live.