Stop the breach. Prove you were protected.
We are a full Managed Security Services Provider. CrowdStrike guards every computer, Check Point guards every inbox, and our own AI-powered SIEM watches everything in one place and acts on threats automatically. Then we document it all so you qualify for Texas SB 2610 safe harbor.
Your security stack, fully managed
- CrowdStrike Falcon Complete24/7 managed detection and response
- IHS AI SIEMone threat dashboard, AI-based mitigation
- Check Point Harmonyphishing stopped before the inbox
- SB 2610 safe harbordocumented, auditable compliance
Four layers. One team. One dashboard.
Each layer covers a different way attackers get in. Together they close the gaps.
CrowdStrike Falcon Complete (MDR)
Elite security experts monitor, investigate and respond around the clock, on every endpoint.
- Falcon Prevent next-gen antivirus blocks malware and malware-free attacks
- Falcon Insight EDR gives deep endpoint visibility
- Falcon Adversary OverWatch threat hunting, 24/7
- Device Control for USB and Firewall Management
- One lightweight agent on each computer
IHS AI-Powered SIEM, built in-house
Our own Security Information and Event Management platform pulls every log into one centralized threat dashboard and uses AI to respond.
- Connects to Microsoft 365, MDR agents, firewalls, servers and Check Point Harmony
- AI correlates events across systems and spots anomalies
- AI-based mitigation acts on threats in real time
- Compliance-ready audit logs, kept in our own datacenters
- Monthly executive security reports
Check Point Harmony Email & Collaboration
Over 90% of cyberattacks start in the inbox. Harmony Complete Protect stops them before users ever see them.
- AI anti-phishing on incoming, outgoing and internal email
- Account takeover protection
- Attachment sandboxing and Content Disarm & Reconstruction
- Link scanning at delivery and again at click
- Data Loss Prevention tuned for PHI
- Covers Microsoft 365, Gmail, Teams, Slack, OneDrive, SharePoint and more
Firewall, backup and people
The rest of what a real security program needs, managed by the same team.
- Next-generation firewall management, IPS and managed VPN
- Immutable Microsoft 365 backup, managed by IHS
- MFA and conditional access on all systems
- Vulnerability scanning and penetration testing
- Security awareness training with phishing simulations
- Incident response plan and tabletop exercises
Texas now rewards businesses that can prove good security
Texas SB 2610 took effect on September 1, 2025. If your business has fewer than 250 employees and can show it followed a recognized cybersecurity framework at the time of a breach, the law shields you from exemplary (punitive) damages in a lawsuit.
IHS builds, runs and documents that program for you, so the proof is ready on the day you need it.
- No punitive damages when you can prove compliance
- Better cyber insurance terms and easier renewals
- Less downtime, because attacks are contained early
- A stronger HIPAA posture from the same work
What the law asks for, by company size
- Under 20 employees: password policy and security awareness training
- 20 to 99 employees: CIS Critical Security Controls, Implementation Group 1
- 100 to 249 employees: NIST CSF or ISO 27001 alignment
- All sizes: appropriate employee cybersecurity training
Every requirement has an IHS service behind it
| IHS service | Framework requirement | How it protects you |
|---|---|---|
| CrowdStrike Falcon Complete (MDR) | CIS IG1 Controls 10 and 17: malware defenses and incident response | 24/7 professional threat hunting and response answers the negligence argument |
| IHS in-house SIEM | CIS IG1 Control 8: audit log management. NIST CSF Detect | Logs prove active monitoring was in place at the time of an event |
| Check Point Harmony | CIS IG1 Control 9: email and web browser protections | Blocks phishing, the number one cause of breaches |
| IHS Microsoft 365 Backup | CIS IG1 Control 11: data recovery | A proven recovery plan keeps data available after an incident |
| Security awareness training | SB 2610 employee cybersecurity training | Required for every tier of the safe harbor |
The five areas we put in place for you
Governance
Written Information Security Policy, incident response plan, annual risk assessment, staff training and vendor risk documentation.
Endpoint & network
Managed EDR with 24/7 MDR, MFA everywhere, secure firewall and segmentation, patching and encrypted devices.
Microsoft 365 & email
Advanced email security, immutable backup, conditional access, secure baseline, DLP and mailbox auditing.
Monitoring & detection
Centralized logs in our SIEM, real-time alert response, monthly executive reports, quarterly vulnerability scans.
Data protection & recovery
Encryption at rest and in transit, off-site immutable backups, and disaster recovery testing.
Frameworks we work to
HIPAA and HITECH, SOC 2 Type II, PCI DSS 4.0, NIST CSF, CIS Controls and Texas SB 2610.
Our incident response, step by step
Detect
Analysts triage the alert from EDR, SIEM, email or firewall.
Contain
We isolate the device, stop the process and block lateral movement.
Investigate
Forensics show how they got in and what was touched.
Notify
We coordinate with legal, compliance and regulators, including HIPAA breach rules.
Eradicate
Malware removed, holes patched, clean state verified.
Recover
Restore from clean backups and deliver a full incident report.
Questions we hear most
What is Texas SB 2610?
Texas SB 2610 is a state law effective September 1, 2025. It protects businesses with fewer than 250 employees from exemplary (punitive) damages after a data breach if they maintained a cybersecurity program that follows a recognized framework such as CIS Controls or NIST CSF. IHS implements and documents that program.
What is an MSSP?
A Managed Security Services Provider runs your cybersecurity for you: the tools, the 24/7 monitoring and the response when something happens. IHS is an MSSP as well as a managed IT provider, so one team handles both.
Why CrowdStrike?
CrowdStrike Falcon is one of the most widely trusted endpoint security platforms. Through our partnership, clients get Falcon Complete managed detection and response, with human experts watching and responding 24 hours a day.
What makes the IHS SIEM different?
We built it ourselves. It connects to Microsoft 365, CrowdStrike agents, firewalls, servers and Check Point Harmony, shows everything in one centralized threat dashboard, and uses AI to correlate events and mitigate threats. Your logs stay in IHS-owned datacenters in Houston and Dallas.
Will this help with cyber insurance?
Insurers now ask which controls and framework you follow. We implement and document the controls underwriters look for, such as EDR, MDR, MFA, email security and backups. Premiums and coverage depend on each insurer's underwriting, so results vary.
Ready to talk? The first assessment is free.
Tell us what is slowing you down. We will review your setup and give you a clear plan, with no obligation and no long-term contract.