IT Healthcheck
Penetration and security testing for services before they are released for public consumption. The ITHC must normally be re-done for each major system change - adding new external API lookups to a previously secure system, for example. Services are not considered 'live' or 'accepted into service' until the ITHC has been completed. Partial ITHCs exist, where a service already passed ITHC and a focussed change has been made.