Detailed Approach to a Network Device Security and Configuration Assessment
- DEVELOP TECHNICAL UNDERSTANDING
Schneider Downs begins by developing an understanding of our client’s network infrastructure through reviewing the network topology, meeting with key technical personnel and understanding any other points of access that may not be indicated within the organization’s technical documentation. - DETERMINE HIGH RISK DEVICES: From here, we collaborate with the client to determine which high risk devices to incorporate into our assessment.
- AUTOMATED IDENTIFICATION OF VULNERABILITIES FOR HIGH-RISK DEVICES: We then take an automated approach to identify all vulnerabilities or misconfigurations for each device.
- ASSESS VULNERABILITIES CONSIDERING MITIGATING FACTORS: We utilize our deep experience to collaborate with our clients and assess the findings to determine their actual threat and risk exposure to the organization. In doing so, we take care to consider other mitigating factors—such as superseding rule sets, access levels, isolation within the network and other security devices—that will impact risk.
- PROVIDE DETAILED VULNERABILITY REPORT:
We will provide a comprehensive vulnerability report with the following data points for each vulnerability or misconfiguration uncovered during the assessment: findings, rating, impact, ease of exploit, recommendations and ease of fix. - CLIENT DISCUSSION:
We meet with the client to discuss our fully vetted findings to ensure that the risks posed for each vulnerability or misconfiguration, along with our recommendations for remediation, are fully understood.
About Schneider Downs Cybersecurity
As the protection of systems and critical data continues to be a major component of cybersecurity awareness, Schneider Downs maintains an in depth knowledge of industry best practices and can assist your organization in identifying vulnerabilities and overall risk to your internal network infrastructure.
The Schneider Downs Cybersecurity practice consists of experts offering a comprehensive set of information technology security services, including penetration testing, intrusion prevention/detection review, ransomware security and vulnerability assessments, as well as a robust digital forensics and incident response team. Learn more at Cybersecurity.
