How do you handle scan exceptions and remediation requests?

1 Scan Permissions

Scan permissions are the formal agreements that you obtain from the owners or custodians of the systems or networks that you want to scan. Scan permissions can be obtained through contracts, service level agreements, or written consent forms. Scan permissions should specify the scope, frequency, duration, and methods of the scanning, as well as the roles and responsibilities of the parties involved. Scan permissions should also include a clause that allows you to report any vulnerabilities or incidents that you find during the scanning.

2 Scan Authorization

Scan authorization is the process of verifying that you have the proper scan permissions before you start scanning. Scan authorization can be done manually or automatically, depending on the tools and policies that you use. Scan authorization should check that the scan permissions are valid, current, and applicable to the scan that you are planning to conduct. Scan authorization should also ensure that you have the appropriate credentials, certificates, or tokens to access the scan targets.

3 Scan Exceptions

Scan exceptions are the situations where you encounter errors, failures, or anomalies during the scanning process. Scan exceptions can be caused by various factors, such as network issues, firewall rules, scan configuration errors, or scan target changes. Scan exceptions can affect the accuracy, completeness, and reliability of your scan results. Scan exceptions should be documented, analyzed, and resolved as soon as possible, following the procedures and guidelines that you have established.

4 Remediation Requests

Remediation requests are the actions that you recommend or require to fix the vulnerabilities or issues that you find during the scanning. Remediation requests can be communicated through reports, tickets, or alerts, depending on the severity and urgency of the findings. Remediation requests should include the details of the vulnerabilities or issues, such as the scan target, the scan tool, the scan date, the vulnerability ID, the vulnerability description, the vulnerability impact, and the vulnerability solution. Remediation requests should also include the priority, deadline, and status of the remediation.

5 Training and Certification

Training and certification are the ways to improve your knowledge and skills in scan permissions and authorization, as well as in other aspects of vulnerability scanning. Training and certification can help you learn the best practices, standards, and frameworks that are relevant to your scanning activities. Training and certification can also help you demonstrate your competence and credibility to your clients, employers, or peers. Training and certification can be obtained through various sources, such as online courses, books, webinars, workshops, or exams.

6 Tips and Tricks

Tips and tricks are the practical advice and insights that you can use to enhance your scan permissions and authorization process. Tips and tricks can help you avoid common pitfalls, optimize your scan performance, and streamline your scan workflow. Tips and tricks can be derived from your own experience, or from the experience of others who have done similar scanning tasks. Tips and tricks can be shared through blogs, forums, podcasts, or newsletters.