Cyber security assessment services are performed to find and fix cyber security risks. There are many types of assessments. Which you need for your business depends on your type of business, your industry, the size of your company and your risk tolerance. But every business should complete cyber risk assessments of some type.
The most common services include:
- Vulnerability assessment. Like the name suggests, this test finds potential weak spots inside and outside your network.
- Penetration test, aka, a simulated cyber attack. Authorized cybersecurity experts (“white hat hackers”) try to breach your system. These tests are much more involved and expensive so they are rarely needed by small businesses.
- Network audit, which looks at what is on your network, often finding unauthorized software or hardware as well as performance or licensing issues.
- Access reviews. These are typically performed for each application to determine who has access to what. Who has admin privileges? Are former employees still in the system? Is someone accessing business data with a personal email login? Periodic access reviews are critical to preventing future attacks.
- Compliance audit, which looks at how well your company is obeying the regulations and laws that relate to your industry. For instance, PCI compliance is required by any business that accepts credit card payments, while a defense contractor will have to adhere to Cybersecurity Maturity Model Certification (CCMC) compliance. Compliance audits review your business as well as any external vendors.
View all FAQs
A vulnerability is a weak spot in a system. Vulnerabilities enable hackers and crackers to gain access to a network. It is virtually impossible to have no weak spots, and not all weak spots exist inside the code itself. The biggest vulnerability for many companies is people. Human examples of vulnerabilities include a human response…
A zero day attack happens when a hacker takes advantage of an unpatched or previously unknown vulnerability for the first time (also known as a zero day vulnerability). Some examples of zero day exploits include: Critical system vulnerabilities and exposures are tracked by some organizations and websites to distribute to others. They maintain lists of…
There are multiple benefits associated with IT service management, including: Aside from the benefits above, the day-to-day conveniences of using an ITSM are many. ITSM is not just support via a help desk or a service desk. While an ITSM may support your business via a service desk, the offerings are much broader than that….
Use our Checklist to Find IT Support
Are you a first-timer to IT support? Maybe you aren’t happy with your current MSP? Our easy-to-follow checklist can guide you through the process of the best IT services provider for your business. It will help you help you outline and define:
- Your business goals for the next few years
- The stats that potential MSPs will need to work out a plan for your company
- The risk areas in your backup and cyber security practices
- What you expect from your IT support provider
- And more!
