To improve the cyber risk posture of a business it is important to perform continuous vulnerability assessments. This process defines, identifies, and classifies the security holes (vulnerabilities) in a computer, network, or application.
The goal of this cyber security maturity assessment is to provide our clients with sufficient information to make more informed cyber security decisions that will ultimately increase the scale and effectiveness of the cyber security programme inside their organisation.
1. Prioritise and scope – this allows us to understand the client’s objectives and main issues before starting the assessment.
2. SANS critical controls assessment – this is a questionnaire-based assessment that allows us to build an interactive profile of the client’s environment.
3. Technical controls assessment – this is a technical assessment that is performed based on the results of the SANS critical controls assessment.
4. Determine, analyse and prioritise the cyber security gaps in the environment based on the results from the SANS critical controls assessment and the technical controls assessment.
5. Remediation recommendations – the client will be presented with remediation recommendations for review and action. Once the cyber security maturity assessment has been completed, we are able to provide clients with a monthly remediation service to implement the remediation recommendations.