"Vulnerability assessment" is the generic term that is thrown around to include just about any type of security assessment. In essence, any time that you assess yourself for vulnerabilities, by definition, you are doing a vulnerability assessment. However, in the industry we generally refer to a vulnerability assessment to include the following types of activities:

Comment (0) Read More...

One of the most frequent questions my client ask me: What type of IT security assessment is right for me.
There are several types of assessments available on the market and because different vendors label them differently - usually to try to gain some competitive advantage - clients can become confused.
In the next few blogs, I'll help clarify the basic types if IT security assessments. But first, let's begin with some basics.
There are six basic categories:

1. Vulnerability assessments
2. Code Reviews
3. Social Engineering
4. Wireless Assessments
5. Threat Risk Analysis
6. Audits

Comment (0) Read More...