Inside Network Security Assessment: Guarding Your IT Infrastructure

Level I Assessments

The heart of a level I assessment includes the policy review, interviews, and system demonstrations. The policy review should have been started during the scoping phase as that was the time at which you should have requested all of the various policies that control the security mechanisms developed by the organization. Before we move on to discussing interviews and system demonstrations we should first turn our attention to what reviewing the documentation should entail.

Reviewing the Documentation

As discussed at various points throughout this book, policies are of vital importance to an organization. It’s important that the organization’s existing policies be reviewed. This is one of the most important activities of a ...