Network Vulnerability Assessment

Preparing a test plan

A vulnerability assessment is often an ongoing exercise that is repeated at regular intervals. However, for a given time period, a vulnerability assessment does have a specific start point and an endpoint irrespective of what type of test is performed. Thus, in order to ensure a successful vulnerability assessment, a detailed plan is necessary. The plan can have several elements as follows:

• Overview: This section provides a high-level orientation for the test plan.
• Purpose: This section states the overall purpose and intent of conducting the test. There may be some regulatory requirements or any explicit requirement from the customer.
• Applicable laws and regulations: This section lists all the applicable laws and regulations ...