Vulnerability Assessment
Vulnerability Assessments Arm Your Business with Knowledge
FairCo’s Vulnerability Assessments identify security holes and vulnerabilities within an organization’s infrastructure. Unlike penetration tests, where the objective of the test is to compromise a system’s network, the purpose of a vulnerability assessment is to identify security holes and vulnerabilities without initiating the actual compromise.
FairCo’s security professionals are able to quickly identify points of vulnerability within a client’s I.T. infrastructure by engaging each target in the infrastructure in a detailed Digital Conversation. Once adequate information is collected about the target’s infrastructure, FairCo is able to accurately identify points of vulnerability.
At the conclusion of a vulnerability assessment, FairCo produces actionable reports which enable our clients to determine how to eliminate the discovered vulnerabilities.
Vulnerability Assessments are broken down into two areas:
-
External Vulnerability Assessments (EVA) are launched from the Internet against
specifically targeted components of an organization’s infrastructure such as networked
computers, routers, and switches. EVAs are ideal for helping groups of any size to
understand their security posture from a publicly based perspective. This understanding
enables organizations to protect themselves from Internet based threats such as worms,
hackers and viruses.
EVAs are relatively inexpensive when compared to the damage caused by a single compromise. FairCo recommends that all Internet-based companies have their network infrastructures assessed with an EVA on a quarterly basis. -
Internal Vulnerability Assessments (IVA) are launched from within an
organization’s Local Area Network (LAN) and are more sophisticated than EVAs. An IVA
will provide a more detailed analysis of an organization’s network and systems. This
is due to the fact that IVAs communicate with every system on the targeted
infrastructure.
Like EVAs, IVAs are relatively inexpensive when compared to the damage caused by a single compromise. FairCo recommends executing IVAs on an annual or quarterly basis depending upon your business and operational requirements.
The Value to Your Business
Both EVAs and IVAs enable our clients to take a proactive approach to network security. They also significantly increase the overall reliability of an organization’s network infrastructures.