Managing A Network Vulnerability Assessment

44 Managing Network Vulnerability Assessment

The NVA might identify exceptional business security risks requiring stron-

ger controls that are additional to the recommendations given in enterprise

standards. Additional controls will need to be justified on the basis of the

conclusions of the security assessment.

Checklists

To a large extent, the need for concern regarding information security is

independent of the size of the organization’s network. The object of an NVA

is not to find the 100-percent security solution; that is not a viable option.

We must look to find ways to level risks to network usage to an acceptable

range. For years, organizations have worked to secure access to the technology

centers that process the organization’s information. T ...