Vulnerability Assessment (VA)

A vulnerability assessment is a systematic review of security weaknesses in an information system. It evaluates if the system is susceptible to any known vulnerabilities, assigns severity levels to those vulnerabilities, and recommends remediation or mitigation, if and whenever needed.

Target

1. Host assessment
2. Network and wireless assessment
3. Database assessment
4. Application scans

Process approach

1. Vulnerability identification (testing)
2. Vulnerability analysis
3. Risk assessment
4. Remediation
5. Final report