- Introduction:
RISKS OCCUR when threats can exploit vulnerabilities. With this in mind, it becomes very important to identify and analyze threats and vulnerabilities. You can do so with threat assessments, vulnerability assessments, and exploit assessments, which are part of IT security assessments. That being said, IT security assessments are more technical, more focused, and, in the case of penetration testing, more targeted than an audit. Comparatively speaking, the auditor takes a broader, holistic view. Nevertheless, auditors still need to gather reliable and relevant evidence to measure compliance. What happens when the auditor lacks the technical skills to gather that evidence? An auditor can employ other experts, given proper permission, to conduct testing such as a security assessment. If that is the case, it is important that the assessment is aligned with the audit’s objectives.
The purpose of aligning an IT security assessment with what to achieve will help you understand what we are facing and try to answer the following questions:
-
- What needs to be protected?
- Who or what are the threats and vulnerabilities?
- What are the implications if they were damaged or lost?
- What is the value to the organization?
- What can be done to minimize exposure to the loss or damage?
Please draft an executive summary explaining how security assessments performed on the seven domains of a typical IT infrastructure can be used to help achieve compliance for an organization. (at least two domains would be required.)
- Learning Objectives
You will be able to:
- Identify the risks that attacks, vulnerabilities, malicious code phishing, and spam have for organizations. common tools and techniques to identify and analyze threats and vulnerabilities throughout the seven domains of a typical IT infrastructure.
- Understating the techniques and their performance
- Relate identified risks, threats, and vulnerabilities to an IT security assessment.
- NOTE:
You may use books and Web sites to help you get information for your paragraph, but don’t copy words from your sources into your discussion board paragraph unless you are clearly marking them as quotations and mentioning the source(s). Even if you copy and paste and then change some of the words, they don’t look exactly like the original source.