Vulnerability Assessment

Vulnerability Assessment

Vulnerabilities are a flaw or weakness in a system security procedure, design, implementation, or control that could be intentionally or unintentionally exercised by a threat. The goal of this program is to develop a list of vulnerabilities (flaws or weaknesses) that could be exploited by potential threat sources. This list should focus on realistic technical and nontechnical areas where critical information can be disclosed without proper authorization, improperly modified, or made unavailable when needed.

What Does This Mean?

1: Asset vulnerabilities are identified and documented

2: Threat and vulnerability information is received from information sharing forums and sources

3: Newly identified vulnerabilities are mitigated or documented as accepted risks

4: A vulnerability management plan is developed and implemented

Quick Link

[vc_widget_sidebar sidebar_id=”footer_second”]

[just_icon icon=”Defaults-comments-o” icon_size=”48″ icon_color=”#ffffff” icon_style=”circle” icon_color_bg=”#f31f25″ el_class=”icon-product”]

Threat and Vulnerability Management Program

The purpose of this document is to assist in defining a comprehensive Information Security Threat and Vulnerability Management Program.

[just_icon icon=”Defaults-signal” icon_size=”48″ icon_color=”#ffffff” icon_style=”circle” icon_color_bg=”#f31f25″ el_class=”icon-product”]

Vulnerability Management Procedures

The purpose of this document is to assist in defining comprehensive Vulnerability Management Procedures as they align to your Threat and Vulnerability Management Program.

[just_icon icon=”Defaults-bullhorn” icon_size=”48″ icon_color=”#ffffff” icon_style=”circle” icon_color_bg=”#f31f25″ el_class=”icon-product”]

Secure Network Configuration Standard

In this document you will find best business practices for developing a network layer standard configuration guide as it aligns to your information security policies.

[just_icon icon=”Defaults-comments-o” icon_size=”48″ icon_color=”#ffffff” icon_style=”circle” icon_color_bg=”#f31f25″ el_class=”icon-product”]

Computer Emergency Readiness

US-CERT is responsible for analyzing and reducing cyber threats, vulnerabilities, disseminating cyber threat warning information, and coordinating incident response activities.

[just_icon icon=”Defaults-signal” icon_size=”48″ icon_color=”#ffffff” icon_style=”circle” icon_color_bg=”#f31f25″ el_class=”icon-product”]

NIST NVD

The NIST National Vulnerability Database shows some of the latest 20 scored vulnerabilities from the NVD, updated once per hour.

[just_icon icon=”Defaults-bullhorn” icon_size=”48″ icon_color=”#ffffff” icon_style=”circle” icon_color_bg=”#f31f25″ el_class=”icon-product”]

Qualys

Get immediate visibility into where your IT systems might be vulnerable.

Program Implementation Support

Are you looking for a partner to help develop industry best practices into your security program?Leading security professionals with the experience and professionalism you desire are at your fingertips.