Question

1) Define the vulnerability assessment requirement, propose a solution, and justify the solution.

2) Define the security policy requirement, propose a solution, and justify the solution.

Answer 1

Question 1: Define the vulnerability assessment requirement, propose a solution, and justify the solution.

Answer:

Definition - Vulnerability Assessment

Vulnerability Assessment is a testing process used to identify and set the severity levels to as many security defects as possible in a given time-period. This Vulnerability Assessment process may involve both automated or manual techniques to do / cover maximum security defects.

doing Vulnerability Assessment in an organization helps in finding the Vulnerabilities in their software so that proposed software solutions become bug-free and security related impacts are avoided too.

How - Vulnerability Assessment Work

Three Main Steps involved in Vulnerability Assessment

Step 1: Identify Vulnerabilities in the given software and group the Vulnerabilities ranging from Critical to Simple mis-configurations

Step 2: Prepare the Vulnerability Report and share the same Report with Developers

Step 3: Create a track issue for the Vulnerabilities Then guide Developer with re-producing the identified Vulnerabilities and fixing the same.

Proposed Solution With Justification for using Vulnerability Scanner Tool.:

Vulnerability Scanner Tool used in order to access Vulnerability requirements are satisfied and all are proper and fine.

Using Vulnerability Scanner Tool major Vulnerability can be identified and can be fixed

Justification:

[1] identify potential weakness in the network like missing proper network patches, weak passwords, mis-configured firewalls

[2] Vulnerability Assessment can be either Free Trail Version Vulnerability Scanner Tool or Paid Licensed Vulnerability Scanner Tool. Ideally we need to use Paid Licensed Vulnerability Scanner Tool to find reliable and maximum Vulnerabilities.

[3] Vulnerability Scanner Tool Configurations can be modified so that outcome of getting more and maximum Vulnerabilities in ease manner.

Question : 2  Define the security policy requirement, propose a solution, and justify the solution

Answer:

Definition - Security Policy

Every Organization has set of security policies , set of objectives that comprises rules of behavior need to be followed by users and administrators.and requirement for system and management that collectively ensure the security of network and computer systems in the organization. Security Policy will be never complete and keeps on updated by organization depends on time-to-time.

A Proper Security Policy describes these below and Security Policy Works on the below

[1] Security Policies to be informed to users, staffs, managers, reporters, human-resource people so that uniformity and unity within the organization

[2] Security Policy Specify Mechanisms how to implement security integration.

Proposed Solution

[3] Protects people and Information

[4] To Set Rules for expected behaviour

Justification

[5] Assign Authorized Staff People to investigate  security constraint issues

[6] Declare and Define the consequences of voliations