Vulnerability Assessment

If you don’t know that you’re not... then you probably are!

Most organisations are happy to assume that their systems, applications and processes are safe. After all, they have an anti-virus programme installed, and the firewall is switched on. Wrong!

An attack can come from a variety of sources – internally as well as externally – and can decimate an organisation’s infrastructure and render data useless.

So a professional Vulnerability Assessment is vital in evaluating the nature and level of potential risk. It’s a 2-stage process:

firstly, we scope the network, and document our proposed actions, costings and timescales;
if these are acceptable, we proceed with a series of proven, standard industry tests, culminating in a report which demonstrates how the systems conform to the customers’ specific legislative requirements.

The tests will look at firewall configurations, weaknesses in applications, network accessibility, servers and workstations, escalations of privileges and levels of assurance.

The 4Secure Report will highlight the levels of risk, and make clear recommendations for remedial action needed to counteract medium- or high-risk situations.

Ultimately, this process identifies whether systems are as well protected as they could – or should – be.

Why 4Secure?

As with most specialist subjects, knowledge and experience are paramount.
All our operators have more than ten years’ experience in vulnerability testing, and use methods fully approved by CHECK.

And because 4Secure operates as both ‘gamekeeper’ and ‘poacher’, we are uniquely placed to design, implement and test systems.

Our continuous professional development programme also ensures that they are completely up-to-date with the latest malware issues, ensuring that we add real value, as well as total peace of mind.

Example – school?

Vulnerability Assessments are particularly important for: government and financial institutions; local authorities; pharmaceutical companies; aerospace contractors; critical national infrastructure, including utilities, food suppliers etc.

Incident management and investigations