Network Vulnerability Assessment

PKM’s Network Vulnerability Assessment helps determine if there are any security holes in your internal network. PKM uses both commercially available tools and free Internet tools, as well as the technical expertise of our IT auditors to complete these audits. Unlike many network audits that only provide hard to decipher technical data that are derived only from the scans, PKM takes the time to interpret the results, weed out the unimportant or false findings and provide management with a concise report in easy to understand language. The final report serves as a report card on your network security.

The assessment consists of five areas of analysis. In each area, a series of procedures is performed to determine if an organization meets important aspects of network and Internet security.

Network Hardware and Operating Systems Configuration

In this area, PKM will test your organization’s network hardware and software configurations to ensure they are set to provide for maximum security. The review will focus on the organization’s firewall rulebase, system settings, and user access to network resources.

External Procedures

PKM will perform external procedures to formulate a profile of your organization’s systems that can be "seen" from the Internet. This profile is an important indicator of vulnerability from hacker attacks and includes systems that can be detected and information a potential attacker may learn from these systems.

Internal Procedures

PKM will review your organization’s overall internal network security environment and make a determination as to the types of information or access that could be inadvertently available to internal users. Software tools will be used to search for known system vulnerabilities and proper end-user controls.

Policies and Procedures

PKM’s review will ensure that network security has been properly addressed in the organization’s policies and procedures by performing an audit of employee passwords and testing their willingness to reveal this confidential information to unauthorized sources.