1. ISO 27001：documentation、AD GPO setting、orchestration management.2. Firewall(PA+FORTI)：rule+filter setting、account management, netflow monitoring.3. WSUS：update release、endpoint management.4. AV(apex one)：security incident response & tracing、endpoint monitoring、update setting、abnormal behavior monitoring.5. Backup(VEEAM)：periodically recovery test for both files and VMs、retention policy setting and adjustment.6. Asset Maangement(WinMatrix)：illegal installed software audit, file transfer audit.7. Mail(ArmorX)：spam management、user account management、filtering rule management.8. Virtualization(VMware)：resource optimization、VM transfer、snapshot management.9. MDR(CrowdStrike)：incident report and reponse、endpoint monitoring.10. Audit Manegement(ForestSafe)：server monitoring、log audit、account manegement.11. Log management(N-Reporter)：log filtering、system fine-tune optimization.

Hardware Maintenance (servers, UPS, FWs, networking devices) :1. replacement of damaged parts for servers, UPS and other devices such as SW, RT, and IPS.2. checking ILO and IDRAC for abnormal activities.3. helping users with regular IT problems(web conferences, RDP with Citrix and SSL issues).AV Software Management(apex one)1. security incident tracing and response.2. basic information maintain.3. scanning for vulnerabilities and exploits.4. log examination.5. checking CVEs and 0day issues.WSUS Maintain1. updates release and examination2. periodically scan of endpoints for abnormal status3. basic AD accounts and groups maintainSystems Backup and Virtualization(ArcServe + Rapid Recovery + VMware)1. snapshot examination and test.2. file recovery and maneuver test.3. VMs restore and migration.4. Efficiency tuning and adjustment.5. Failover maneuver training.Asset Management(Smartit + OpenAudit)1. system maintain and illegal activities violations tracing.2. USB devices control and authentication check.Networking1. abnormal activities in VPNs tracing.2. IPS logs check.3. MPLS VPN check and failover response.

1. Project evaluation and risk assessment. Task schedule arrangement, SA documentation and briefing and pressure test.2. Study on daily cyber security techniques, incidents and latest trends. Attend for conferences and workshops to seek possibilities for cooperation with other vendors.3. Holding up CTF games, planning, infrastructure evaluation, budget-counting and training.4. Study on large-scale ddos attacks and counter-measures.5.Other : utilities arrangement and network/defense device evaluation and installation.

1.Facilitating government employees to engage new information system.2. Support other cities and report to headquarter.