Managing A Network Vulnerability Assessment

160 Managing Network Vulnerability Assessment

Body of the NVA Report

Methodology Overview

The Overview in Exhibit 2 describes the methodology used by the NVA team

to gather the information upon which the recommendations are based. The

NVA follows the Facilitated Risk Analysis Process (FRAP) for risk analysis.

Security Profile

This section (see Exhibit 3) contains documents and data collected during

Phase I (Data Collection) and Phase II (Interviews, Information Reviews, and

Hands-On Investigation) of the NVA process:

 Background information: baseline information about Bogus Corporation

 Company documents: policies, procedures, processes, training materials,

and network topology; copies of relevant company documentation are

included in Appendix A of ...