Reference no: EM134000976

Assignment:

This security assessment's purpose is to evaluate the security posture of a fictional company's information systems and networks. The assessment includes a comprehensive review of the company's security policies, procedures, and controls and testing and analysis of the company's infrastructure and applications. This assessment's goal is to identify potential security risks and vulnerabilities and provide recommendations for mitigating those risks.

Scope and Methodology

The scope of this security assessment includes the following:

• Review of security policies, procedures, and controls.
• Testing of the company's infrastructure, including network devices, servers, and workstations.
• Testing of the company's web applications and databases.
• Analysis of the company's physical security measures.

You will conduct the assessment using a combination of automated tools and manual testing techniques. The assessment team will consist of certified security professionals with extensive experience in conducting security assessments.

In your paper,

Summarize how to verify each control from a Security Gap Analysis to ensure it is functioning properly and as required.

Devise a security assessment by completing the following:

• List the controls.
• Explain how you will verify each control is working as designed and as required.
• Include any vendor recommendations and/or industry best practices.
• Evaluate the security posture of the fictional company's information systems and networks.
• Assess the company's security policies, procedures, and controls and testing and analysis of the company's infrastructure and applications.
• Identify potential security risks and vulnerabilities and any recommendations for mitigating those risks.