Cybersecurity Assessments, Evaluations, and Remediation support for critical- or high-severity vulnerabilities.

Guaranteed minimum testing impact

• APT & 0-day readiness
• Critical-severity penetration testing (vulnerability validation and exposure)
• Determine exposure of Internet-facing applications
• Exposure to insider threat
• External network vulnerability scans
• General Operations Security (staffing, resources, tool utilization)
• Identify & simulate potential attackers’ approaches
• Practical, real-world testing, analysis, & assessment
• Security & network architecture review
• Simulated black box penetration testing

 

Results: What You Will Get

Weekly

• Executive In/Out-briefing
• Call with stakeholders to discuss status, progress, & to review findings spreadsheets
• Continuous updates of findings spreadsheet & reports
• Ongoing testing for external fingerprinting, application and network vulnerability testing, penetration testing

 

Onsite

• Account/credentials practices assessment
• Configuration Management assessment
• Facilitated Threat Assessment Session (FTAS) – facilitated workshop w/ stakeholders
• Incident response assessment
• Internal vulnerability  testing
• Network assessment
• Lateral movement assessment
• Security tools assessment

 

At Conclusion

• Out-brief presentation: rating, indicators, detailed pros and cons of each of the 10 assessment areas
• Detailed reports in writing, including findings spreadsheet with specific recommendations that can be used to manage remediation activities
• Raw data & reports
• Limited remediation support (re-scans)