Host: AV, Host FW/IPS, Patch Management, Vulnerability Notification

ANTIVIRUS

The Anti-Virus management solution is designed to protect Microsoft platforms (e.g. desktops/laptops) from viruses, worms and malware.

The service provides a management platform that will provide AV statistics and reporting for End Markets along with global management reporting. End-Markets are required to ensure that the necessary software is installed on their estate, this service will provide installation packages and documentation along with assistance to End Markets to ensure that the software is functioning correct on the desktops/laptops. End markets are required to notify the service provider (ITC) of their nominated security representative so as access control to the management information can be controlled. End-Markets will be required to provide a distribution server (can reside on existing server) in order to facilitate the distribution of anti-virus signatures.

We at ITC will maintain and manage the central management and database servers in order to support this service, we will also provide expert virus outbreak assistance as and when required.

HOST FW / IPS

The Host Protection management service provides firewall and IPS to Microsoft hosts (desktops/laptops). The IPS component of this solution augments the anti-virus service to provide exploit detection before viruses based on those exploits are even written.

The firewall component of this solution protects laptops from malicious traffic whilst they are connected to hostile networks, for instance when users connect to the Internet in public places.

End-Markets are required to ensure that the host software is installed and functioning correctly on machines within its estate. End-Markets will be provided with software installation packages and associated documentation, along with expert assistance in fault finding and assisting End-Markets in installing the software. End markets are required to notify the service provider (ITC) of their nominated security representative so as access control to the management information can be controlled.

The service provider will maintain and manage the central management and database servers in order to support this service, we will also provide expert virus outbreak assistance as and when required.

The service provides a management platform that will provide IPS/Firewall statistics and reporting for End Markets along with global management reporting.

PATCH MANAGEMENT

The Patch Management service enables customers to provision patches to the Microsoft family of products. The solution provides management reporting at both an End-Market and global level.

End-Markets have the option of automatically installing patches based on global testing and approval, or controlling the distribution and installation of those patches themselves. End-Markets are required to ensure hosts are configured correctly in order for them to communicate with the WSUS infrastructure. End-Markets will be required to install and maintain a local WSUS server (can be installed on an existing server) in order to facilitate the distribution of patches, installation documentation and assistance will be provided. End-Markets will be informed of new patches via the patch testing and release notification service, End Markets will need to nominate one or more security representatives who will receive these notifications.

ITC can liaise with global application groups in order to facilitate patch testing, patches will only be released when all parties are satisfied that the patches will not adversely affect their environment. End-Markets are obliged to undertake testing of local application to ensure patches will not adversely affect their environment.

VULNERABILITY NOTIFICATION

Vulnerabilities relating to commercial and open source software will be notified bi-weekly. End Markets are required to ascertain if any of the software identified as having vulnerabilities detailed via this service is used on their estate. End Markets then need to classify these vulnerabilities and perform a risk assessment. Subsequently End Markets must plan to implement patches/mitigation to those vulnerabilities.