Vulnerability Assessment

A vulnerability assessment helps identify, classify, and prioritize vulnerabilities in network infrastructure, computer systems, and applications. A vulnerability is a security weaknesses that might expose the organization to cyber threats or risks. Vulnerability assessments often employ automated testing tools such as network security scanners, showing the results in a vulnerability assessment report

va1

Threats

View potential threats

Risk

Determine risk level = A x V x T

Remediation

Proactively fix vulnerabilities

Policy

Establish process, standards and guidelines

Inventory

Discover all assets across the network

Prioritize

Assign business value to assets

Vulnerabilities

Determine vulnerabilities on assets

Compliance

Review for policy compliance

Measure

Measure impact of security decisions and actions