Build And Configuration Reviews

Security vulnerabilities across networking, security, telecommunications & other internal equipment, OS and endpoint vulnerabilities.

Effective patch management plays critical role in closing window of opportunity for attackers, thats between the vulnerability disclosure and patch release.

Group Policy allows administrators to define security policies for users and the servers within the network. These policies are administered from a central location exclusively to the Windows operating system. The policy settings generally, among other things, enforce password settings, external media access, network-level access, patching schedule and application restrictions.

The best practices based group policy would ensure a safer network for an organisation and minimise the attack window for a threat actor to gain unauthorised access.

Logging and monitoring controls are reviewed to identify flaws in event collection, analysis and threat identification.

Full disk encryption is a cryptographic method that applies encryption to the entire hard drive including data, files and software programs. In an adverse case, if a device/server is stolen or unauthorised physical access is achieved, this could be disastrous for a company. A threat actor would gain access to sensitive information such as personably identifiable information (PII) or proprietary information stored on this device due to a lack of disk encryption.

Your network devices or servers BIOS or UEFI Firmware offers the ability to set lower-level passwords. These passwords would restrict people from booting the server, booting from removable devices, and changing BIOS or UEFI settings without administrators permission.

The nature of security vulnerabilities and threats is one of constant evolution; growing in sophistication and changing in order to exploit new vulnerabilities and evade detection.

This is why you need to perform regular secure configuration reviews and security assessments to protect your network devices, device configuration, firewall configuration, security systems and mobile devices.

Authentication is a fundamental component of ensuring cyber security controls for most of the assets.
Based on our methodology and scope of the job, we perform two types of password reviews which include password policy reviews and a password cracking exercise followed by statistical analysis to find out the complexity & character patterns in use.

A vast majority of cyber attacks take advantage of known software and hardware vulnerabilities. Unpatched software including Operating System (OS) and third-party applications can attract malicious code to the vulnerable servers. Software patching can act as a defensive armour that repels malicious attacks and protects your organisation against multiple exploits. This finding is tested during penetration testing and build reviews.