Network Security Risk Assessments

GNS consultants follow tried and tested methods proven to be very useful in performing their Network Security Risk Assessments.

By focusing our attention on the areas of the network that are exposed to potential threats we can reduce unauthorised access using cutting edge measures to achieve the highest levels of assurance hand in hand with true value.

Protecting your data assets from even the most severe threats begins with securing all devices that provide a gateway to your network. Our network security consultants identify and thoroughly test potential points of attack after evaluating every live host, open port, and available service. Our consultants seek out and identify all vulnerabilities and focus first on areas where a compromise would have the greatest impact and create the highest risk to your business. We also specialise in policies and regulations needed for security, especially for E-commerce and financial services. Our analysis of a client’s system and will not disrupt the day to day running of your organisation having little or no impact on staff or productivity.

Footprint Analysis and Information Gathering

The Footprint phase enables our consultants to produce a detailed blueprint of your company’s network and its security profile along with an assessment of the major components that affect the network’s overall risk.

The Information Gathering phase results in a detailed blueprint of your company’s network that lists the types of hosts and their operating systems. This allows us to achieve thorough mapping and overcome any blind spots you might have. During this phase we gather domain names, IP network ranges, and information about hosts, such as operating systems and applications.

Vulnerability Scanning

The information gathered during the Footprint Analysis and Information Gathering phase is used to perform the Vulnerability Scanning phase and penetration vulnerability of the system. We take a holistic view of the network and chains multiple, low-risk vulnerabilities in order to achieve a high level of access into the target network. This vulnerability linking typically culminates in pilfering sensitive data such as password hashes, restricted databases, or attaining specific trophies that your company identifies.

Manual Vulnerability Verification

Our consultants go the extra mile during our security assessment and perform manual verification of the discovered vulnerabilities to minimise the number of false positives, thus saving you time during the remediation process. Manual checks are performed to ensure that the operating systems are properly identified and version numbers are correct to best of our knowledge.

Penetration Testing

GNS’s network penetration testing provides one of the most thorough tests of internal defences available. Our consultants scrutinise internal systems for any weakness or sliver of information that could be used by an internal attacker to disrupt the confidentiality, availability, or integrity of the internal network.

Vulnerability Analysis

The last step of our Comprehensive Network Security Assessment is the vulnerability analysis. This in-depth analysis of your vulnerabilities is performed to determine the systemic causes which will help develop strategic recommendations. Our consultants will also categorise and prioritise the strategic recommendations by personal, process, and technology. This information seamlessly feeds into the GNS next-step recommendations specific to your organisation.

GNS offers a Vulnerability Assessment that provides a rapid and efficient inventory of the devices, services, and vulnerabilities of internet-connected networks.

A typical comprehensive Network Security Risk Assessment consists of the following assessment areas:

• Network security assessment
• Firewall security assessment
• VPN security assessment
• Wireless security assessment
• Social engineering security assessment
• Server security configuration assessment
• Microsoft® Windows® security assessment
• Network architecture security assessment
• Mobile security assessment
• VoIP security assessment (if applicable)
• IPTV Security Assessment

• Physical security assessment