Vulnerability Assessment
Definition
What is a Vulnerability Assessment?
A Vulnerability Assessment is a systematic process used to identify, quantify, and prioritize security vulnerabilities in an organization’s systems, networks, or applications.
Unlike penetration testing, which involves actively exploiting vulnerabilities to assess their real-world impact, a vulnerability assessment focuses on discovering and cataloging potential weaknesses before they can be exploited by attackers.
The process begins with the discovery phase, where automated tools and scanners are employed to scan networks, systems, and applications for known vulnerabilities, such as unpatched software, configuration errors, and insecure default settings. After vulnerabilities are identified, they undergo analysis to determine their potential impact (using CVSS), including how easily they could be exploited and the possible damage from successful exploitation so that they can be prioritized based on severity, with categories like critical, high, medium, or low, depending on factors such as exploitability, the sensitivity of affected systems, and potential business impact.
The assessment concludes with a report that outlines the findings, including a list of identified vulnerabilities, their severity, and recommended mitigation strategies.
Core Concepts
NAC – Network Access Control
Network Access Control (NAC) is a security solution that helps...
Read More
IDPS – Intrusion Detection and Prevention System
Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) are...
Read More
VPN – Virtual Private Network
A Virtual Private Network (VPN) is a technology that allows...
Read More
Ransomware
Ransomware is a type of cyber attack in which the...
Read More
RTO – Recovery Time Objective
The Recovery Time Objective (RTO) defines the maximum amount of...
Read More
RPO – Recovery Point Objective
An Incident Response Plan (IRP) is a strategy that outlines...
Read More
IRP – Incident Response Plan
An Incident Response Plan (IRP) is a strategy that outlines...
Read More
DRP – Disaster Recovery Plan
A Disaster Recovery Plan (DRP) is a key document in...
Read More
BIA – Business Impact Analysis
A Business Impact Analysis (BIA) is a vital process in...
Read More
BCP – Business Continuity Plan
A Business Continuity Plan (BCP) is a key document in...
Read More
CBA – Critical Business Asset
A Critical Business Asset (CBA) is the most essential resource...
Read More
CBP – Critical Business Process
A Critical Business Process (CBP) is the most crucial process...
Read More
ISO/IEC – 27001
ISO 27001 is a globally recognized standard for information security...
Read More
National Institute of Standards and Technology (NIST) Special Publication 800-53
The National Institute of Standards and Technology (NIST) Special Publication...
Read More
GDPR – General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a comprehensive data...
Read More
FISMA – Federal Information Security Modernization Act
The Federal Information Security Management Act (FISMA) is a United...
Read More
HIPAA – Health Insurance Portability and Accountability Act
The Health Insurance Portability and Accountability Act (HIPAA) is a...
Read More
AICPA – American Institute of Certified Public Accountants – SOC2
The American Institute of Certified Public Accountants (AICPA) SOC 2...
Read More
CISO – Chief Information Security Officer
A Chief Information Security Officer (CISO) is a senior executive...
Read More
Digital Forensics
Digital Forensics is a field that specializes in the investigation...
Read More
Vulnerability
A Vulnerability refers to a weakness or flaw in a...
Read More
APT – Advanced Persistent Threat
Advanced Persistent Threat (APT) is a term describing a sophisticated...
Read More
Threat Hunting
Threat Hunting is a proactive process aimed at locating and...
Read More
Cyber Attack Vectors
Attack Vectors are the pathways through which attackers infiltrate computer...
Read More
CISSP – Certified Information Systems Security Professional
Certified Information Systems Security Professional (CISSP) is an international certification...
Read More
EDR / XDR – Extended Endpoint Detection and Response
Extended Detection and Response (XDR), similar in nature to EDR,...
Read More
SIEM – Security Information and Event Management
Security Information and Event Management (SIEM) is a system designed...
Read More
SOAR – Security Orchestration Automation and Response
Security Orchestration, Automation, and Response (SOAR) is a solution designed...
Read More
DLP – Data Loss Prevention
Data Loss Prevention (DLP) systems focus on identifying, monitoring, and...
Read More
SOC – Security Operations Center
A Security Operations Center (SOC) is a centralized unit within...
Read More
CVE – Common Vulnerabilities and Exposures
CVE is a program used for reporting security vulnerabilities and...
Read More
Patch Management
Patch Management involves identifying, assessing, and installing updates and patches...
Read More
IOC – Indicators of Compromise
Indicators of Compromise (IOCs) are data or parameters that help...
Read More
CVSS – Common Vulnerability Scoring System
The Common Vulnerability Scoring System (CVSS) is an international method...
Read More
GRC – Governance Risk Compliance
Governance, Risk, and Compliance (GRC) is a comprehensive concept that...
Read More
FedRAMP – Federal Risk and Authorization Management Program
FedRAMP (Federal Risk and Authorization Management Program) is a U.S....
Read More
SABSA – Sherwood Applied Business Security Architecture
SABSA (Sherwood Applied Business Security Architecture) is a business-driven security...
Read More
TOGAF – The Open Group Architecture Framework
TOGAF is a comprehensive framework that guides organizations in designing,...
Read More
MTTR – Mean Time to Recover
Mean Time to Recover (MTTR) is a key metric in...
Read More
Brute Force Attack
A Brute Force Attack is a trial-and-error method used by...
Read More
Insider Threat
An Insider Threat refers to a security risk posed by...
Read More
Packet Sniffing
Packet Sniffing is a technique used to monitor and capture...
Read More
Phishing Attack
Phishing is a social engineering attack in which cybercriminals impersonate...
Read More
Penetration Test
A Penetration Test or simply pen test, is a simulated...
Read More
UAC – User Access Control
User Access Control (UAC) is a security feature in Windows...
Read More
WSC – Windows Security Center
Windows Security Center (WSC) is a built-in feature in Windows...
Read More
Email Security Gateway
An Email Security Gateway is a system or appliance designed...
Read More
ISC2 – The International Information System Security Certification Consortium
The International Information System Security Certification Consortium (ISC2) is a...
Read More
Cryptography
Cryptography is the practice of securing information by converting it...
Read More
AMSI – Anti Malware Scan Interface
The Anti-Malware Scan Interface (AMSI) is a security feature in...
Read More
Bastion Host
A Bastion Host (AKA Jump Box) is a specialized server...
Read More
ETW – Event Tracing for Windows
Event Tracing for Windows (ETW) is a high-performance logging mechanism...
Read More
MFA – Multi Factor Authentication
Multi Factor Authentication (MFA) is a security mechanism that requires...
Read More
Vulnerability Assessment
A Vulnerability Assessment is a systematic process used to identify,...
Read More
IOA – Indicators of Attack
A Brute Force Attack is a trial-and-error method used by...
Read More
CSA – Cloud Security Alliance
The Cloud Security Alliance (CSA) is a nonprofit organization dedicated...
Read More
CISM – Certified Information Security Manager
Certified Information Security Manager (CISM) is a globally recognized certification...
Read More
PII – Personally Identifiable Information
Personally Identifiable Information (PII) refers to any data that can...
Read More
ISACA – Information Systems Audit and Control Association
The Information Systems Audit and Control Association (ISACA) is a...
Read More
IETF – Internet Engineering Task Force
The Internet Engineering Task Force (IETF) is an open standards...
Read More
ICANN – Internet Corporation for Assigned Names and Numbers
The Internet Corporation for Assigned Names and Numbers (ICANN) is...
Read More
IEEE – Institute of Electrical and Electronics Engineers
The Institute of Electrical and Electronics Engineers (IEEE) is the...
Read More
IANA – Internet Assigned Numbers Authority
The Internet Assigned Numbers Authority (IANA) is a key organization...
Read More
CISA – Cybersecurity and Infrastructure Security Agency
The Cyber security and Infrastructure Security Agency (CISA) is a...
Read More
PHI – Protected Health Information
Protected Health Information (PHI) refers to any information in a...
Read More
CRISC – Certified in Risk and Information Systems Control
Certified in Risk and Information Systems Control (CRISC) is a...
Read More
Administrative Controls
Administrative controls are policies, procedures, and guidelines that govern how...
Read More
CASB – Cloud Access Security Broker
A Cloud Security Access Broker (CASB) acts as an intermediary...
Read More
Physical Controls
Security measures designed to protect an organization's physical infrastructure and...
Read More
Digital Signatures
Digital signatures are cryptographic mechanisms used to authenticate the validity...
Read More
IAM – Identity and Access Management
Identity and Access Management (IAM) is a framework of policies,...
Read More
SASE – Secure Access Service Edge
Secure Access Service Edge (SASE) is a cloud-based architecture that...
Read More
WAF – Web Application Firewall
A Web Application Firewall (WAF) is a security solution designed...
Read More
Zero Trust
Zero Trust is a security framework that operates on the...
Read More
Technical Controls
Technical controls (also known as logical controls) are security measures...
Read More
TOR – The Onion Router
TOR is a privacy-focused network that enables anonymous communication over...
Read More
Tails OS – The Amnesic Incognito Live System
Tails (The Amnesic Incognito Live System) is a privacy-focused Linux...
Read More
Privilege Creep
Privilege creep occurs when an individual within an organization gradually...
Read More
The Principle of Least Privilege
The Principle of Least Privilege (PoLP) is a security concept...
Read More
IAAA – Identification and Authentication Authorization and Accountability
Identification, Authentication, Authorization, and Accountability (IAAA) are four key principles...
Read More
DPO – Data Privacy Officer
A Data Privacy Officer (DPO) is a key role within...
Read More
Data Owner
A Data Owner is a person or entity accountable for...
Read More
Data Custodian
A Data Custodian is responsible for the technical management, storage,...
Read More
Biba Model
The Biba Model is a formal security model focused on...
Read More
Cyber Security Architect
A Cyber Security Architect is a professional responsible for designing...
Read More
Bell LaPadula Model
The Bell-LaPadula Model is a formal security model designed to...
Read More
MITRE ATT&CK
MITRE is a not-for-profit organization that operates federally funded research...
Read More
MITRE D3FEND
MITRE D3FEND is a cyber security framework designed to help...
Read More
