登录查看更多内容

How do you prioritize and remediate network security vulnerabilities after an audit?

由人工智能和领英社区提供技术支持

Network security audits are essential for identifying and addressing the risks and weaknesses in your network infrastructure. However, audits can also generate a lot of data and recommendations that can be overwhelming and challenging to prioritize and remediate. In this article, you will learn how to use a systematic and effective approach to deal with network security vulnerabilities after an audit.

此文章中的业界达人

由社区从 8 条内容中精选。了解更多

Kirill Tarasov

??Penetration tester | ??Cyber security engineer | ???OSINT analyst
Sujit Suryawanshi

Security Engineer 3 @PayPal | Ex-IBMer | Application Security | Product Security | Offensive Security | Threat Modeling…
Shreelaxmi Nair

Vulnerability Management Specialist at Deloitte

1 Assess the severity and impact of vulnerabilities

The first step is to evaluate the severity and impact of each vulnerability that the audit has uncovered. Severity refers to how easy it is to exploit the vulnerability and how much damage it can cause to your network. Impact refers to how many systems, users, and business processes are affected by the vulnerability. You can use a common framework, such as the Common Vulnerability Scoring System (CVSS), to assign a numerical score to each vulnerability based on these factors.

添加您的观点

Rafael Ronald

Analista de Tecnologia e Inova??o | Infraestrutura de Redes | CNA - Companhia de Navega??o da Amaz?nia S. A.
举报内容
Classifica??o de Vulnerabilidades: Classifique as vulnerabilidades com base na gravidade e no impacto. Prioriza??o: Corrija as vulnerabilidades críticas primeiro. Implementa??o de Controles Adicionais: Adote medidas de seguran?a adicionais. Monitoramento Contínuo: Estabele?a um processo de monitoramento constante. Revis?o e Atualiza??o: Revise regularmente políticas e procedimentos de seguran?a. Treinamento em Seguran?a: Eduque os funcionários sobre práticas seguras. Priorizar e corrigir vulnerabilidades de seguran?a de rede após uma auditoria requer um plano de a??o abrangente e coordenado, que envolva diferentes partes da organiza??o, incluindo equipes de TI, gerenciamento de riscos e funcionários usuários finais.

已翻译

赞
Andres Angel Nieto Morales

Information Security Officer at Banco General
举报内容
Diria que lo principal es atacar aquellas vulnerabilidades criticas, explotables, con exploit disponible, por lo general debemos guiarnos en el CVSS 3.0, ya que este nos indica que tan explotable es dicha vulnerabilidad, tambien hay que destacar que debes revisar tus controles, ya que puede que tengas una vulnerabilidad critica, pero tienes un control adicional que puede resultar algo mitigante o que te puede permitir darle prioridad a otra vulnerabilidad que afecta mucho mas a tu ambiente, aunque esta no sea tan critica como la anterior.

已翻译

赞

2 Prioritize the vulnerabilities based on risk

The next step is to prioritize the vulnerabilities based on the risk they pose to your network security. Risk is a function of severity and impact, as well as the likelihood of exploitation and the cost of remediation. You can use a simple matrix or a more sophisticated tool, such as a risk heat map, to rank the vulnerabilities from high to low risk. The higher the risk, the higher the priority for remediation.

添加您的观点

Kirill Tarasov

??Penetration tester | ??Cyber security engineer | ???OSINT analyst
举报内容
Focus on addressing high-risk vulnerabilities with known exploits, affecting critical resources or sensitive information, and consider the ease of remediation. Regularly reassess and update priorities based on emerging threats and changes in the network environment.

已翻译

赞
Sujit Suryawanshi

Security Engineer 3 @PayPal | Ex-IBMer | Application Security | Product Security | Offensive Security | Threat Modeling | Security Architecture
举报内容
After completing an audit, start by evaluating the severity of vulnerabilities, taking into account the potential impact. This is usually done using frameworks like CVSS. It's important to pay special attention to vulnerabilities that might be part of an exploit chain or could lead to a more extensive compromise-they need urgent attention. Give priority to critical assets, thinking about how vital they are to daily business operations. When it comes to fixing these vulnerabilities based on their priority and severity, a patch management system comes into play. Start by dealing with critical systems and those with high-severity vulnerabilities, ensuring a systematic and strategic approach to the remediation process.

已翻译

赞

3 Plan and implement remediation actions

The third step is to plan and implement remediation actions for each vulnerability, according to its priority. Remediation actions can include patching, updating, configuring, or replacing software or hardware, as well as changing policies, procedures, or user behaviors. You should document the remediation actions, assign responsibilities, set deadlines, and track progress. You should also test the effectiveness of the remediation actions and verify that they do not introduce new vulnerabilities or issues.

添加您的观点

Shreelaxmi Nair

Vulnerability Management Specialist at Deloitte
举报内容
In my experience, it is efficient to categorize vulnerabilities based on the type of vulnerability such as missing patches in OS, vulnerable tool versions installed on the server, network vulnerabilities, etc. This way we can assign specific group responsible for remediations. Setting a deadline based on severity sets priority for remediations. Lastly, continuous monitoring and remediation efforts reduces the overall risk posture of an organization.

已翻译

赞

4 Communicate and report the results

The fourth step is to communicate and report the results of your remediation efforts to the relevant stakeholders, such as management, auditors, customers, or regulators. You should provide clear and concise information about the status of each vulnerability, the remediation actions taken, the outcomes achieved, and the lessons learned. You should also highlight any gaps, challenges, or recommendations for improvement. Communication and reporting can help you demonstrate your compliance, accountability, and commitment to network security.

添加您的观点

5 Monitor and review your network security

The fifth step is to monitor and review your network security on a regular basis, as vulnerabilities can emerge or reappear over time. You should use various tools and techniques, such as scanning, logging, auditing, or penetration testing, to detect and analyze any changes or anomalies in your network. You should also review your network security policies, standards, and best practices, and update them as needed. Monitoring and reviewing can help you maintain your network security posture and readiness.

添加您的观点

Mina Tawadrous

Product (Platform Engineering) @ SiriusXM
举报内容
If you want to protect your applications, Having security in your CI/CD process is a must! Many modern tools allow your code to get scanned on a continuous basis through every stage in your SDLC. At the end of the day, you need to measure your program based on how easy it is for a developer to 'fix' an issue - not just how quick it is to 'find' the issue.

已翻译

赞

6 Learn and improve from your network security audit

The sixth and final step is to learn and improve from your network security audit experience. You should identify and address the root causes of your network security vulnerabilities, such as outdated systems, misconfigurations, human errors, or malicious attacks. You should also evaluate and enhance your network security capabilities, such as skills, tools, processes, or culture. Learning and improving can help you prevent or mitigate future network security vulnerabilities and incidents.

添加您的观点

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Anne Caroline

Especialista em Seguran?a Cibernética | Prote??o de Dados Pessoais
举报内容
Após uma auditoria de seguran?a de rede, priorizar e corrigir vulnerabilidades é essencial para fortalecer a postura de seguran?a da organiza??o. Ao avaliar a gravidade e o impacto de cada vulnerabilidade, priorizando-as com base no risco e implementando a??es de remedia??o de forma planejada e diligente, assegura-se uma abordagem eficaz para mitigar as amea?as. Comunica??o transparente dos resultados e aprendizado contínuo s?o fundamentais para manter a seguran?a da rede aprimorada e adaptada às evolu??es do cenário de amea?as.

已翻译

赞
Sergio Cabrera

Pentester | Cybersecurity Analyst
举报内容
Beyond technical aspects, consider organizational culture, user awareness, and the evolving threat landscape. Cultivate a security-aware culture, educate users, and stay informed about emerging threats to fortify your network security strategy.

已翻译

赞

Security Testing

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you prioritize and remediate network security vulnerabilities after an audit?

1

2

3

4

5

6

7

1 Assess the severity and impact of vulnerabilities

2 Prioritize the vulnerabilities based on risk

3 Plan and implement remediation actions

4 Communicate and report the results

5 Monitor and review your network security

6 Learn and improve from your network security audit

7 Here’s what else to consider

Security Testing

给文章评分

感谢您的反馈

更多Security Testing相关文章

更多相关阅读内容