IT Security Assessments

IT Security Assessment

More in-depth than even our intensive Vulnerability Assessment, the IT Security Assessment is recommended for companies that want a true IT security investigation—especially those with exposure from sensitive or proprietary data. This activity probes deep into the organization’s technology infrastructure, systems and policies/procedures to help stakeholders make vital decisions regarding the corporate IT security posture, including but not limited to:

• Network Security: Ensure all security appliances and security-related software are properly configured, performing optimally and up to the task of securing the enterprise
• Wireless Security: Evaluate wireless networks for encryption issues, rogue (unauthorized) access points and other potential threats
• Personnel Security: Assess the organization for personnel improprieties, security training deficiencies, ineffective policies and procedures, and other high-risk issues
• Data Classification: Scrutinize how corporate data is classified and secured, including access controls

Enhanced Scans and Tests

For the deepest possible probe of network security, InterDev recommends two additional procedures. Our security experts work closely with clients to determine whether they will reap meaningful value from these add-on services. A surprising number of companies discover that their level of exposure makes these procedures a necessity.

Vulnerability Scan

Using Qualys’ industry-leading, 99.99966% accurate QualysGuard Vulnerability Scanner, our technicians safely and efficiently scan for and detect security vulnerabilities across the entire network and its perimeter. Driven by the largest and most up-to-date knowledge base of vulnerability checks in the industry, QualysGuard’s extremely accurate scans eliminate the resource drains associated with false positives, false negatives and host crashes.

• Web application scanning detects vulnerabilities in web applications of all sizes
• Malware detection scans websites for malware infections and threats
• Scan all connected devices, servers and network services on the Internet or in your network
• View interactive scan reports by threat or by patch
• Test websites and apps for top risks and malware

Penetration Test

Penetration testing moves beyond scanning to proactively, safely attempt to compromise system security by exploiting targeted external and internal vulnerabilities. Penetration tests provide a definitive benchmark that validates the effectiveness of corporate defenses, from firewalls to end-user adherence to security policies. To ensure the most effective penetration tests possible, InterDev utilizes Core Security, a global leader in penetration testing. The benefits of a Core Security penetration test include:

• Identify higher-risk vulnerabilities that result from a combination of lower-risk vulnerabilities in a particular sequence
• Identify vulnerabilities that may be difficult or impossible to detect with automated network or application vulnerability scanning software
• Assess the magnitude of potential business and operational impacts of successful attacks
• Test the ability of network defenders to successfully detect and respond to the attacks
• Support increased investments in security personnel and technology

After the test, information about any successful exploits is aggregated and presented to organizational stakeholders. InterDev’s security experts can then help the team evaluate the consequences of such incidents, reach strategic conclusions and prioritize technical and procedural countermeasures to reduce future risk.