The pre-assessment phases involves everything that needs to be accomplished to ensure we fully understand your goals, challenges and organization. We also use this time to setup the Rules of Engagement (RoE) that identifies the scope, communication plan, types of testing and approvals. This is a critical step of any type of assessment. Cyber Criminals spend hours, days, months, and possibly years performing passive analysis of an organization. They understand how critical it is to understand how the business operates before attacking it. And we do too! 

The assessment phase focuses on executing the mission and assessing the technical and non-technical security controls in the agreed upon Rules of Engagement (RoE). This is the part we go dark and begin testing. We document weaknesses as we go and execute the communication plan to keep your key stakeholders informed. At the end of the assessment we provide you an executive level briefing to show you the top problems and recommendations on how to fix them.  

The final phase, post-assessment, is the off ramp of the assessment. This is where further analysis is conducted at our home base and a final detailed report is created. We take this time to review findings, analyze raw vulnerability data, document lessons learned, produce qualitative or quantitative results, formulate metrics, and close out any questions from the assessment briefing. We will deliver you an in-depth final repot when complete. Our final repots provide: Executive Summary, Detailed Findings and recommendations, Metrics, Key Performance Indicators, Infographics, and other information we deem that will help you 10x your Cyber Security!