External Vulnerability Assessment

Overview
A comprehensive examination of external network connections and Internet access points to identify security vulnerabilities, evaluate their seriousness, and communicate their risk to the customer.
Most organizations are required to have an External Vulnerability Assessment performed per regulatory requirements.
A quarterly External Vulnerability Assessment is considered an IT best practice.
Project Steps
Determine external IP addresses that are in scope.
Run initial scans to determine the vulnerabilities that exist
Work with your team to remediate the deficiencies
Rescan you environment to confirm that deficiencies have been resolved
Deliverables
Detailed report showing vulnerabilities ranked by severity with detailed suggestions on how to remediate
Customers-Partners
Features
All engineers have CISSP, CISA, and PCI QSA certifications
Web based collaboration site used for project communication (Tasks, Documents, Milestones, Discussions)
Great References
State-of-the-art lab for payment application testing and forensic analysis


















