Our Approach and
Methodology
SecureState looks at industry best practices and hardening techniques, and
interprets the configuration settings by understanding the overall architecture
of the organization. By looking at logging and alerting capabilities, ingress
and egress points, additional security methods, and best practices, SecureState
can identify exposures and response capabilities in some of the first lines of
defense for a network.
SecureState will review the device configurations for the following items:
- Review configuration files for the identification
and protection of all network segments
- Review the processes and mechanisms for a security
model that denies access by default, such that explicit
access permissions must be specified
- Review the documentation of those entries and to the
configuration of those ports and services for access
request and authorization listings
- Identify the implementations of appropriate use
policies
- Review the implementation of processes for
monitoring and logging access at access points to
the network
- Review the security monitoring process and its
ability to detect and alert for attempts or actual
unauthorized access
- Identify best practices implementation and lack
of hardening techniques
- Reviewing appropriate documentation (Minimum
Security Baselines and access control policies)
- Conducting conversations with the appropriate
client personnel
- Evaluating the systems against Nationally
recognized security hardening, placement, and
integration guidelines