Demand Background

With the rapid development of the national digital economy, the role of the communications industry in various fields of the economy and society has become increasingly important. As a leading integrated communications service provider in China, China Telecom is not only required to provide high-quality telephone, broadband, mobile communication, and data services but also needs to address the increasingly complex challenges of cybersecurity. Ensuring the stable operation of the network and the security of data, especially when carrying important information and supporting a large user base, is of vital importance. Therefore, establishing a comprehensive and efficient security assurance system to ensure the continuity and availability of key services has become an urgent need.

Solutions

We provide full support from security experts throughout the project implementation and offer security assurance services during critical periods[Planning Phase - Critical Protection Phase - Post-Event Summary Phase].

1.[Preparation and Planning Phase] Develop a security operations plan, conduct risk assessments, and design emergency response plans.

2.[Implementation Phase] Senior engineers will be stationed on-site to provide real-time security monitoring, vulnerability remediation, and hardening measures, as well as 24/7 technical support and consulting services.

3.[Post-Implementation Review Phase] After the completion of the critical protection period, the project manager will be responsible for summarizing the project, evaluating the effectiveness of security protection, and summarizing experiences in handling security incidents.

Customer Value

By offering comprehensive security assurance services, China Telecom can ensure the continuous stability of its communication and data services, reduce potential security risks, and enhance users' trust in its services. In addition, real-time security monitoring and emergency response can quickly identify and address unexpected incidents, ensuring the high availability of the network. Through optimized security protection strategies, China Telecom can effectively prevent cyber-attacks and data breaches, support the smooth progress of the digital economy and information technology construction, further improve the customer experience, reduce operational costs, and enhance compliance to avoid legal risks.

Demand Background

With the increasing severity of the cyber security situation, the State Grid Corporation of China requires its subsidiaries to conduct quarterly security assessments,including penetration testing and vulnerability scanning services, to identify and remediate potential security issues in a timely manner.

This not only helps to enhance the overall cyber security protection level of the subsidiaries, but also provides strong performance support and evidence of achievements for the headquarters, ensuring consistency and efficiency in technical security at the group level.

Solutions

For the subsidiaries, quarterly security vulnerability detection, penetration testing, and vulnerability remediation plans are provided to ensure that each subsidiary can complete and submit the relevant vulnerability detection and remediation results on time. Each subsidiary is required to submit multiple reports to the headquarters at the end of each quarter, including:

1.Risk Assessment Report

2.Penetration Testing Report

Customer Value

Enhancing the Group-Wide Security Protection Capability.

Through regular security services, ensure that each subsidiary continuously improves in cyber security management and protection, adhering to the unified security standards set by the headquarters. This will comprehensively enhance the overall security protection capability of the group and reduce potential security risks.

Quantifying Performance Achievements.

Each subsidiary will provide detailed reports on vulnerability detection, remediation status, and improvements in security protection. This will form quantifiable security performance metrics, which will help the headquarters to comprehensively evaluate the security performance of each subsidiary, identify weak links in a timely manner, and develop targeted security improvement measures.

Demand Background

A department of the Hong Kong Polytechnic University (HKPU) has launched a scientific research project in mainland China focusing on emerging technologies and applications. The project mainly involves multiple levels of business functions, including data collection, storage, analysis, and visualization. Its technical core comprises modules such as cloud databases, edge computing, and cross-regional collaborative management. After several years of technical research and development in collaboration with multiple parties, the project is now close to entering the final acceptance phase.

In accordance with China's relevant cyber security regulations and the requirements for the conclusion and acceptance of scientific research projects, the project is required to provide a corresponding Cyber Security Protection Level Assessment Report in order to complete the formal acceptance.

Solutions

The Inside Tech Service Team, leveraging its in-depth understanding of the Protection Level 2.0 standard and extensive experience in the field of cyber security, provided HKPU with comprehensive security services that cover the entire process of “assessment + rectification.” By assisting the project team in conducting preliminary preparations, implementing assessments, remediating vulnerabilities, and strengthening security, the team helped them obtain a compliant Protection Level assessment certificate within the stipulated time. Meanwhile, during the assessment and rectification process, the Inside Tech Service Team conducted multi-layered security testing on the website and related systems, identifying and remediating potential vulnerabilities and risk. This laid a solid foundation for the long-term stable operation of the project.

Customer Value

During the critical phase of project acceptance,the Inside Tech Service Team provided full-process support from classification to assessment and then to rectification,helping HKPU successfully meet the requirements of the Protection Level Assessment and obtain the compliance certificate.This significantly reduced the risk of project acceptance delays or obstructions due to security issues.

By conducting a comprehensive review and rectification of system vulnerabilities and management processes,HKPU has established a more robust security operations and emergency response mechanism.This has enabled continuous monitoring and protection of research data and website systems,providing a reliable security guarantee for the stable generation of future research outcomes and international academic cooperation.