Cyber Vulnerability Assessments

Owners of critical infrastructure are particularly aware of the rise in potential cyber threats to their organizations. Their large-scale and complex IT environments – multiple systems, networks, servers, endpoint devices, data – present ample opportunity for malicious behavior from both inside and outside of the organization.

With over 20 years of collective experience in security-sensitive critical infrastructure environments, SDI’s Cyber Team comprehensively addresses cyber assets deployed throughout an organization’s IT environment. SDI evaluates an organization’s current state, defines organizational security requirements and an optimal target state, and provides a plan for achieving target security posture and compliance (PCI, SarbOx, SSAE16, HIPAA, PHIPA, etc.) requirements. SDI offers:

• Comprehensive identification and evaluation of the strength and efficacy of the client’s existing security architecture, infrastructure, cyber toolset, and policies
• Enterprise Vulnerability Assessments (EVA) – Deploying cyber partner eSentire’s advanced cyber toolset to address each client’s unique environment and security posture. SDI’s EVA exercise includes:
  – Malicious Activity Assessment
  – Phishing Testing
  – Open Source Intelligence Gathering
  – External Penetration Testing
  – Internal Vulnerability Scanning
  – External/Internal Vulnerability Rescan (following remediation activities)
  – Internal Penetration Testing (Authenticated and Unauthenticated Testing)
  – End Point Analysis
  – Web Application Testing/Re-test (following remediation activities)
  – Wi-Fi Assessment
  – Comprehensive Analysis/Review of Security Architecture, Key Security Devices, Policy, and Existing Active Threats
  – Physical Environment Inspections
  – Red Team Exercises
• EVA exercise findings and recommendations for possible mitigation strategies and approaches
• Field remediation of identified cyber vulnerabilities
• On-going cyber defense threat monitoring via cyber partner eSentire’s 24x7x365 Security Operations Center
• Cyber policy and procedure development
• Employee cyber training
• Overall cybersecurity use case/cost savings rationalization