Managing A Network Vulnerability Assessment

24 Managing Network Vulnerability Assessment

industry may have one or two office locations where staff must be interviewed

but may also have a number of refinery and distribution plants where the

company feels there is not a strong need to interview staff. (We make no

comment here on whether that decision is right or wrong.) In another industry

— perhaps healthcare — the organization’s management may decide that staff

at each location must be interviewed. The healthcare organization may have

its headquarters in one city and hospitals and doctors’ offices in many cities

located many miles apart.

In each case, we will need to know how many offices are to be ...