Security Verification and Offensive-Defensive Practice
A power company
Background
Compliance Background: "Cybersecurity Law", "Data Security Law", "MLPS 2.0", "GB T 39204-2022 Information Security Technology - Baseline Requirements for Protection of Critical Information Infrastructure";
Security Construction Status: A large number of security protection devices have been deployed, periodic security assessments are performed, and the Security Operations Center has been established.
Requirements
1. Confirm the effectiveness of existing security technical measures and meet the validation requirements in "Security Management Construction";
2. Improve the operational capabilities of the security operations team (improvement of platform capabilities, improvement of personnel capabilities, accuracy and rationality of incident response processes).
3. Maintenance and improvement of HVV performance.
Current Status
The defence system already includes:
Network, endpoint/host security, email security, data security, vulnerability management, identity security, advanced persistent threat defence, application security, code security, etc.
Security operations team, SOC, threat intelligence and other platforms.
Security Incident Response Process
Services Provided by Security Validation
Provide technical validation services through the "Enterprise Network Security Practical Ability Evaluation" service of the Third Research Institute of the Ministry of Public Security.
Provide validation for 11 major capability items, 70 technical items, and nearly a thousand attack techniques.
