One of the many things that happens behind the scenes for HICS schools is the monitoring of internal systems 24/7, 365 days per year. This is carried out by the managed IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) scanning all traffic permitted by the firewall. Activity will be monitored by RM’s external security specialist partner SecureWorks. When SecureWorks spot any abuse of the service from the Internet, it will raise a ticket and pass to matter RM/HfL to investigate. In many of these occurrences, HfL will contact the school to offer assistance. RM/HfL will review the issues seen on the IDS/IPS and then consider the options with the school, to consider if the firewall rule permitting that traffic is still required and to decide if we can improve it to prevent the attacks. Alternatively, extra mitigation or patching may be required on the school server to prevent the abuse.
SecureWorks are a global company specialising in providing managed security services and collecting 190 billion events every day from the devices they manage. With HICS schools making the most of RM’s partnership with them, it helps us to deliver a security driven service by reusing SecureWorks’ expertise along with their tested processes and procedures.