RITC Cybersecurity

BACKGROUND

Please describe your company and position.

I am the Project Manager of Apstia Private Limited

Describe what your company does in a single sentence.

We are a leading technology solutions provider offering web and mobile app development, digital marketing, and IT consulting services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire RITC Cybersecurity to accomplish?

• IT infra audit and implement security policy for company
• Creation & Implementation of Zero Trust Policy

SOLUTION

How did you find RITC Cybersecurity?

Referral

Why did you select RITC Cybersecurity over others?

• Pricing fit our budget
• Referred to me

How many teammates from RITC Cybersecurity were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

1. Overview
This project was executed to enhance the cybersecurity framework of Apstia through a comprehensive assessment and transformation of its IT infrastructure. RITC Cybersecurity was engaged to conduct a detailed Infrastructure Audit, develop and implement organization-specific Security Policies, and roll out a Zero Trust Security Model to improve resilience against cyber threats.

2. Objectives
Evaluate existing infrastructure for vulnerabilities and compliance gaps.
Design and operationalize a security policy framework tailored to Apstia’s environment and regulatory requirements.
Implement a Zero Trust architecture that ensures secure and controlled access to all systems and resources.
3. Scope of Work
3.1. Infrastructure Audit
Complete review and mapping of Apstia’s IT infrastructure including on-premise and cloud assets.
Identification of vulnerabilities, misconfigurations, and outdated systems.
Review of access control mechanisms, network segmentation, and endpoint protections.
Delivery of an audit report containing:

Risk-based vulnerability analysis
Asset inventory and data flow mapping
Recommendations for improvement with prioritization
3.2. Security Policy Development and Implementation
Creation of customized cybersecurity policies in alignment with:

ISO 27001/27002
NIST CSF
Applicable industry regulations
Policies delivered include:

Acceptable Use Policy
Access Control and Identity Management Policy
Data Protection and Privacy Policy
Incident Response and Escalation Policy
System Update and Patch Management Policy
Integration of policies with Apstia's IT and administrative processes
Training sessions for staff and key personnel to ensure policy awareness and adherence
3.3. Zero Trust Policy Implementation
Evaluation of Apstia's infrastructure readiness for Zero Trust adoption
Design of Zero Trust Architecture covering:

Identity-first security
Micro-segmentation of the network
Continuous verification and authentication
Implementation of:

Multi-Factor Authentication (MFA)
Role-Based Access Control (RBAC)
Conditional access policies
Network access controls with least privilege principles
Configuration of continuous monitoring and threat detection systems
4. Key Deliverables
Deliverable
Description
Infrastructure Audit Report
Detailed analysis of current infrastructure and associated security risks
Cybersecurity Policy Set
Complete set of tailored policies with implementation guidelines
Policy Implementation Plan
Rollout plan with responsibilities, timelines, and compliance checkpoints
Zero Trust Architecture Blueprint
Framework and operational design of Zero Trust controls
MFA, RBAC & Conditional Access Implementation
Deployed configurations to enforce Zero Trust principles
Employee Training Materials
Documents and presentation decks for internal awareness programs
Final Implementation & Compliance Report
Verified list of actions completed and compliance achieved

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Week 1–3: Infrastructure Audit
Week 4–6: Policy Development
Week 7–10: Policy Implementation
Week 11–12: Zero Trust Deployment
Week 13: Final Review, Testing & Handover

Describe their project management. Did they deliver items on time? How did they respond to your needs?

I would say one of the smoothest project delivery i have came across from a vendor. RITC's team provided us full support and guided us on every step.

What was your primary form of communication with RITC Cybersecurity?

Virtual Meeting

What did you find most impressive or unique about this company?

No beating around bush, right on the point from day one.

Are there any areas for improvement or something RITC Cybersecurity could have done differently?

I think reporting can be shifted toward cloud so real time access is possible for clients. shifting reporting to the cloud can enhance real-time access, collaboration, and transparency, especially for clients needing timely updates on audits, vulnerabilities, and policy compliance.