Vulnerability Assessments

Our vulnerability assessment services identify security vulnerabilities in networks from the perspective of the company, from the inside looking out. Security vulnerabilities not only include technical flaws in systems but also include many areas that typical network security scanners and externally originated assessments (e.g. penetration tests) cannot identify. 

We utilize a comprehensive, well proven methodology to provide a complete picture of the technical security posture of the site. 

Our certified, trained professionals use their experience and training to identify configuration and implementation vulnerabilities that may not be obvious to the organization. They utilize modified checklists based on industry standards (NIST, DOD, ISO, CERT etc) and scanning tools together with personnel interviews and group meetings to better identify risks and understand the business reasons behind configuration and design decisions.

A vulnerability assessment conducted by SecurityRiskSolutions also includes recommendations and suggestions for mitigation. Recommendations will help organizations improve practices and procedures without necessarily requiring the purchase of new technology solutions. As a vendor neutral company, we do not resell any products and therefore maintain complete impartiality when developing mitigation strategies and providing recommendations.

 

Vulnerability Assessment Areas

Identified Using:
Network Scanners and Tools  Manual Checks and other Means

Host scanning and review of effectiveness of patch management procedures

ü
ü

Firewall ruleset & configuration review

 
ü

Border router ACL & configuration review

 
ü

Network topology/design review (includes VLANs, defense-in-depth, remote access etc)

 
ü

Effectiveness of internal audit processes

ü
ü

Account review (privileged, user, service and generic accounts)

ü
ü

Security policy review (and level of adherence to them)

 ü
ü
 

Physical security review

 
ü

© 2007 Security Risk Solutions, Inc.  All Rights Reserved

 
  • Targeted
  • Standards
    Based
  • Effective