Developing Information Assurance
Vulnerability Management (IAVM) Compliance
Addenda to the SSAA.
Our Network Vulnerability Assessments
provide an evaluation of an organization's existing
security posture and make recommendations for
improvement:
Identify Information Criticality
Identify System Configuration (Footprinting)
Identify Organization's Security Posture
Evaluate Existing Practices, Policies and
Procedures
Perform Penetration Testing
Report Findings and Recommend Action Plan
Our Network Assessment Methodology incorporates the
National Security Agency (NSA) INFOSEC Assessment
Methodology (IAM), which is a four-phase approach to
INFOSEC Assessments:
Pre-Assessment Planning
Information Gathering
Information Analysis
Findings & Recommendation Reporting
Our Network Assessment Methodology also incorporates
the DoD "Red Team" Methodology.
We utilize "state-of -the-art" vulnerability
scanning tools and penetration testing frameworks.
Our Security Policy & Procedure
Development provides a framework for a
successful security program:
We develop policies and procedures that address
the confidentiality, integrity, and availability
of critical information
We address areas to protect an organization's
reputation, IT resources, and employees
Our Information Security Awareness Training
ensures that your staff is not the weakest link in your
security arsenal.
We offer training for all levels of
an organization: