Tuesday, a hacker finds a theoretical vulnerability in software that you happen to use (say Microsoft Office).

Monday, your system is considered secure.

This is all harder than you think, because for any given piece of software, you may not make a change, but the situation changes around you. This is not a one-time thing like installing a fire wall, it is an on-going process that you have to do all the time Cyber Criminals don’t take Christmas, Eid, Diwali, Hanukkah or any other holiday off in fact, they often use them because they know you will be out of the office and slow to respond. Unfortunately, this is a dynamic, ever-changing situation.

If you find vulnerabilities then you’ll want to get them fixed. It entails scanning your IT infrastructure or software applications to locate and address known software vulnerabilities. Vulnerability management is an integral part of maintaining your organisation’s computer and network security. Read more about the difference between Vulnerability Scanning v. Vulnerability Management is the act of doing this search, analysis and fix process. These need to be found, analysed and normally fixed. Virtually every environment will have security issues (or often referred to as vulnerabilities in the cyber security jargon) within it.

looking and behaving as an attacker would seeing what they see – spotting the potential weaknesses. One of the most critical layers, is that of offensive security, i.e. If so, I would recommend out maturity assessment model for when you have finished.Īs they say, security it all about layers, if a bad guy gets through one layer, you want another one right behind it, a deep defence approach. If you have got this far, I am guessing that you are relatively new to the information security (InfoSec) market and looking to take some important first steps.

How to use nessus professional