/*
Customise Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.

Advertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns.

/*]]>*/

Vulnerability Assessment

April 5, 2025

Vulnerability Assessment

You are here:
< Back

What is a Vulnerability Assessment?

A Vulnerability Assessment is a process essentially acting like a “health check” to discover potential vulnerabilities before they can be exploited by attackers, allowing for timely remediation and mitigation strategies to be implemented; it involves scanning for known vulnerabilities, assigning severity levels, and recommending corrective actions to address them.

VENDOR DEFINITIONS

VA Tools and Best Practices – Imperva
A  systematic review of security weaknesses in an information system. It evaluates if the system is s…
Black Duck
SPECIFIC DEFINITIONS: 

Formal description and evaluation of the vulnerabilities in an information system.

SOURCE: SP 800-53; SP 800-37

Systematic examination of an information system or product to determine the adequacy of security measures, identify security deficiencies, provide data from which to predict the effectiveness of proposed security measures, and confirm the adequacy of such measures after implementation.

SOURCE: SP 800-53A; CNSSI-4009