Embedded Files
A security policy assessment is the evaluation of your organization’s current security policies. Our specialists will assist with the improvement of policies or create policies for your organization. Some policies we can assist with include: Acceptable Use Policy (AUP), Incident Response, Disaster Recovery, Remote Access, BYOD, and more.
Our Methodolody
Our Methodolody
All testing performed under security policy assessment are based on the NIST SP 800 - 115 Technical Guide to Information Security Testing and Assessment, OWASP testing Guide (v4) plus other customized testing frameworks.
PLANNING
Customer goals are gathered and rules of engagement obtained.
DISCOVERY
Perform scanning and enumeration to identify potential vulnerabilities, weak areas and exploit.
REPORTING
Document all found vulnerabilities and exploits, failed attempts, company strengths and weaknesses.
Thorough Testing
Thorough Testing
Items reviewed during policy assessment include but not limited to:
Access Control Policy
Disaster Recovery Plan
Password Policy
Remote Access Policy
Acceptance Use Policy
Incident Response Plan
Bring Your Own Device (BYOD) Policy
Other policies and plans depends on specific customer content and footprint.
Page updated
Google Sites
Report abuse