First step of vulnerability assessment process is to profile the target, i.e. a network, a server or a device.
This is a non-intrusive exercise and involves activities like analysing the network, understanding the different assets and services, operating systems, programs in use and anything related to network layout.
This is a fundamental step and helps to prepare for the next stage of finalising targets and finding weaknesses.

This phase includes running vulnerability scanner excluding any dangerous plugins to find weaknesses in the scoped systems. This exercise is scheduled in automated fashion unless explicitly agreed to limited timescales with a customer.

The prioritised list of targets is scanned for vulnerabilities. This assessment involves checking both published as well as undocumented vulnerabilities against the target assets. We sift through the scan results for false positives. The manual assessment ensures focus on verified vulnerabilities only.

The assessment-execution phase is followed by the analysis & reporting. Cyber Partners perform analysis on the testing output, evaluates the risk impact and likelihood of exploitation in realistic scenarios before providing action plans to remediate the identified risks. All our reports address business as well as the technical audience with supporting raw data, including mitigation measures at strategic and tactical levels.

Cyber Partners take customer communication as seriously as reporting or assessment execution. We engage with customers during all stages and ensure that customer contacts are up to date in the language they understand. Post engagement, a free debrief is conducted to help the customers understand the weaknesses and prepare a mitigation plan. Phone and email support is available after the project completion.

A proven approach to protecting your organisation against the evolving threat of ransomware

While completely preventing ransomware attacks is nearly impossible, security and risk management professionals can take proactive steps to neutralize or mitigate their harm. Basic cyber hygiene remains fundamental. First, that means taking the time to accurately and regularly document the entire configuration of your network.

Ransomware represents such a persistent threat, that it has caught the attention of executive leadership teams who are asking a basic question: “are we prepared against ransomware?” At Cyber Partners we have prepared an assessment that can be tailored to the needs of your business to help answer the ransomware preparedness question.

Learn More