Cyber Security Advisory & Management Partners

We work with clients across Canada.

Everyone! Everyone from individuals to corporations has sensitive personal information on devices and services that if compromised, can be used for fraudulent purposes.

• Gather the most current system diagrams and documentation. This will help us quickly determine the current state and where to start.

• Identify which systems are most critical to business operations. Consider all technology involved in business processes that could have negative impact on the businesses brand, reputation, or revenue if failed

• Identify who is responsible for oversight of each business system and who understands system operation. Engage these resources throughout the assessment.  They will be able to provide valuable insight and assistance to coordinate on-site assessment activities

• Scans can range in aggressiveness. It’s better to be cautious and only safe settings – consult vendor documentation and sample templates if not sure which settings to use.

• When running vulnerability scans in an operational environment, it’s important to start with least critical networks/devices first. 

• Vulnerability scan activity should be reviewed with operations to determine if any negative effects were observed on the less critical environment before proceeding to more critical systems.  

• If there are no issues are detected during the initial scans, it may be safe to proceed scanning mode critical devices, but it’s important to limit scanning to minimize risk. 

• Be reasonable in scan activity, do not scan hot and standby servers or all operator workstations simultaneously, pick a subset to scan or schedule scans in succession.

• Always notify operations staff prior to any vulnerability scans and follow up when completed.  Provide them with a single point of contact to report any issues identified during the scan

.