Cyber Risk Advisory

Vulnerability Assessment

Business Critical Applications and associated IT infrastructure is deployed across enterprise LAN , WAN and in cloud environment . Attack surface of threat actors varies based on the entry and exit points of the application ie internet or intranet.
As Threat and Vulnerabilities in the infrastructure can exist across any of 7 layers of the network as per ISO-OSI model, it is extremely important that the Vulnerability Assessment program adopts a holistic approach covering threats and exposures at all level i.e from application interface to OS level to Protocol level and IT infrastructure.
A comprehensive VA approach thus helps in identifying possible risk and threats across different IT Network layers , reduce false positive alerts /alarms, granularly define the risks ( high , medium , low) and thus priorities mitigation plans .