Security Risk Assessment

A security risk assessment evaluates the potential threats to your organization and the risks to the confidentiality, integrity, and availability of information. Our specialists will evaluate your organization and the controls currently in place to provide strategic recommendations based on the likelihood and impact of our findings.


Our Methodolody

All testing performed under security risk assessment are based on the NIST SP 800 - 115 Technical Guide to Information Security Testing and Assessment, OWASP testing Guide (v4) plus other customized testing frameworks.

PLANNING

Customer goals are gathered and rules of engagement obtained.

DISCOVERY

Perform scanning and enumeration to identify potential vulnerabilities, weak areas and exploit.

REPORTING

Document all found vulnerabilities and exploits, failed attempts, company strengths and weaknesses.

Thorough Testing

Items reviewed during risk assessment include but not limited to:

  • Data Protection

  • Browser and email protections

  • Disaster recovery plans

  • Hardware and asset management

  • Security awareness training

  • Malware defences

  • Account monitoring and controls

  • Incident response management

  • Other items depends on specific customer content and footprint.