Managing A Network Vulnerability Assessment

Introduction 11

Summary

Network vulnerability assessments are often abused offerings from consulting

companies. The major reasons for this include the depth and breadth of a

NVA, which can be quite large and will generally require a team of people,

and not just one employee, and the less technical aspects that can be

completely overlooked. When this is combined with a NVA, which is not part

of a larger informaiton security life cycle, it can quickly become a wasted

expense.

The team required to run a NVA must be made up of folks with a variety

of different skillsets. Some of the most commonly needed skills are project

management, interview and interrogation skills, policy and procedure writing

and reviewing skills, and technical network skills. This team ...