Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations

© Morey J. Haber, Brad Hibbert 2018

Morey J. Haber and Brad HibbertAsset Attack Vectorshttps://doi.org/10.1007/978-1-4842-3627-7_6

6. Configuration Assessment

Morey J. Haber¹  and Brad Hibbert²

(1)

Heathrow, Florida, USA

(2)

Carp, Ontario, Canada

 

In recent years there has been an increasing number of legislated regulatory mandates with which organizations must comply with to prove the confidentiality, integrity, and availability of information stored in their systems and provided through external parties. After reading various white papers, websites, and other articles that loosely use the terms “PCI, HIPAA, SOX, CIS, NIST, ISO, CIS, COBiT, FISMA, and FDCC,” heads can start spinning. Like many security professionals, we are not auditors or a lawyers ...