Vulnerability Assessments are a vital part of risk management programs and provide valuable data for risk analysis activities.

Network Perimeter Assessment

A network perimeter assessment examines the network's web presence from the Internet, reviewing web applications and services for vulnerabilities. It is important to remember that all network environments differ in layout, scope and complexity, Leading Change, Inc. could include any or all of the following steps in an assessment:

• Review external firewall rule sets and router configurations
• Obtain DNS zone information
• Map external network devices and servers
• Identify open ports and associated services on external network
• Identify operating system and server vulnerabilities
• Review patch levels on external network devices and servers devices and servers
• Review remote management process and procedures
• Analyze vulnerabilities associated with e-commerce, shopping cart and other web applications
• Security review of network topology and server placement in DMZ, and extranets

Internal Network Assessment

Return to SecureIT