An ITHC, or IT Health Check, is an IT security assessment required, as part of an accreditation process, for many government computer systems in the UK.[1][2]
An ITHC is generally performed by an external service provider, although NCSC personnel may perform ITHCs on especially sensitive systems. It can touch on both applications and infrastructure, and involves an element of penetration testing.[3][4]
CHECK is a scheme for ITHC providers, run by NCSC.
References
- ^ "CHECK - Fundamental Principles of the CHECK Service". Retrieved 2017-06-02.
- ^ "IT Health Check (ITHC): supporting guidance". Retrieved 2017-06-02.
- ^ "About Tigerscheme". Retrieved 2010-10-13.
- ^ About CREST Penetration Testing Archived 2011-08-02 at the Wayback Machine
External links
- National Cyber Security Centre (NSCS)
- Tigerscheme
- CREST (Council of Registered Ethical Security Testers)
- The Cyber Scheme
This page was last edited on 19 December 2021, at 23:21