4 Managing Network Vulnerability Assessment
Can One Person Perform an NVA?
Yes, but it depends on the depth of the NVA. While a good security practitioner
can perform all the technical aspects of an NVA, it is very difficult to find one
person who can perform the technical testing and functions such as policy
and procedure review. And if this individual is capable of doing both, the
next question becomes: can he or she perform both functions well? In essence,
it really requires a team to run an NVA, unless it is restricted to a technical-
only NVA or the organization is very small.
Introduction to Vulnerability Assessment
The technical aspects of an NVA are often downplayed or given very little
thought. This component of an NVA is often left to the software ...