What is a Vulnerability Assessment?

 

A Vulnerability assessment is the process of identifying, quantifying, and prioritizing (or ranking) the vulnerabilities in a system. In cyber security, a Vulnerability Assessment is the process of performing a review of your network and systems against cyber security standards. This focus can be either on your entire network, or a specific area. The assessment then assigns a priority and criticality to each issue. A good Vulnerability Assessment will be your guide on where to focus your cyber security efforts!

​

Why do we need a Vulnerability Assessment?

 

Simple - hackers are continuously conducting Vulnerability Assessments on your network without your permission. Shouldn’t you do one too? You NEED to know if parts of your network are lacking in security.

​

When do we need a Vulnerability Assessment?

​

Now… the answer is you need one Now.

 

Assuming you don’t add too many internal devices, a small assessment every year should suffice. This takes a few people about a day or less.

 

Every year, schedule about two days for a vulnerability assessment. Seriously, it’s just good housekeeping. Use it as a time to say, “let’s review what we’ve changed.” Make it about more than just security.

 

Annually, with small vulnerability assessment items when you follow your process to add new gear. That is to say, when you add a new service, server, or network equipment, as part of your process spend some time to assess how the device or system will affect over all system security. This will make your annual review take just a few hours instead of it being a huge ordeal each year.