Managing A Network Vulnerability Assessment

78 Managing Network Vulnerability Assessment

This part of the NVA usually requires tact and patience. Inevitably, some

of the sponsor reviewers will see parts of the Draft Report as a direct reflection

of their competence or job performance. It may be difficult to protect the

integrity of your findings without offending some of the reviewers. Negotiate

as much as you can, because it is important that everyone understand that

the findings are intended to provide guidelines for improved security for the

company, not to review anyone’s performance.

Phase V: Final Report and Presentation

The Team Lead gathers the sponsor’s comments and integrates them into the

Final Report. The Final Report is then generated; a limited number of copies

should be made. The Final ...