-AI Pentest shall be conducted on demand or scheduled, with prior endorsement from the customer.
-Provide the assessment findings with remediation suggestions in a report
-8x5 Office Hours helpdesk and SOC remote support for security issues on managed devices provided by CPC
-CPC's office hours are from 09:00 AM to 06:00 PM, Monday to Friday, excluding public holidays specified by the Government of Hong Kong and any adverse circumstances evaluated by CPC. Remote support is provided on an 8x5xNBD basis for service configuration changes.
-Known vulnerabilities will be tested.
-Denial of service testing is not performed.
-Scheduled automatic report generation and delivery via the customer's email system.
-12 TrustCSI service tokens are allocated per year.
-The usage of service tokens includes security consultancy for any non-CPC managed device based on TrustCSI IAS AI Pentest results, and ad hoc configuration change request to the TrustCSI IAS AI Pentest application.
-Configuration and/or migration of any non-CPC managed device is not included
-The TrustCSI IAS AI Pentest service is billed based on each customer site, per month.
- Provide Attack Surface Management (ASM) report findings for risk assessment
- Deliver ASM reports for up to 3 domains provided by the customer
- Customer should allow CPC to collect the necessary information for the ASM assessment.
- During the contract period of AI Pentest, ASM report will be generated quarterly. 5 ASM reports will be provided for an annual subscription.
- CITIC Telecom CPC bears no responsibility for any system failures, hardware or software issues, network device malfunctions, server problems, application errors, or data loss experienced by the customer during or after the service period. The customer is solely responsible for any related financial losses.
- The price stated is in Hong Kong dollars.
- This offer is valid until Feb 28, 2025, on a first-come, first-served basis.
- CITIC Telecom CPC reserves the right to terminate, suspend, or withdraw the promotion offer and to change the terms and conditions of the promotion offer at any time without prior notice.
-In the event of any disputes, CITIC Telecom CPC reserves the right to make the final determination, which shall be conclusive and binding on the subscriber.
| 1. | To ensure that sufficient resources are allocated to meet the minimum requirements for installing the TrustCSI IAS AI Pentest. |
| 2. | To ensure the availability of the customer's target devices, hosts, systems, and services for assessment. |
| 3. | To ensure the accessibility of devices, hosts, systems, and services for assessment by and to the TrustCSI IAS AI Pentest, and to guarantee network connectivity across networks for access to and from the TrustCSI IAS AI Pentest. |
| 4. | To allow Internet access for the TrustCSI IAS AI Penetration Test to retrieve the latest updates. |
| 5. | To allow the TrustCSI IAS AI Pentest to be installed in the customer’s environment, including hosts and systems, with security measures if necessary. |
| 6. | To allow remote access from CPC during support or manual configuration changes |
| 7. | To back up and restore systems or services related to the TrustCSI IAS AI Pentest in case of unexpected events. |
| 8. | To assist CPC with any requests to ensure the smooth completion of the assessment. |
| 9. | To guarantee that all information provided is accurate and correct. |
(Additional) Consultancy service:
-All works will be performed from remote by default.
-Any onsite support is not included
-Consultancy service provided in office hours.
-CPC's office hours are from 09:00 AM to 06:00 PM, Monday to Friday, excluding public holidays specified by the Government of Hong Kong and any adverse circumstances evaluated by CPC.