Hacking For Dummies, 5th Edition

Part VI

Security Testing Aftermath

Five Pieces of Information Every Security Report Must Have

• Date(s) the testing was performed
• Tests that were performed
• Summary of the vulnerabilities discovered
• Prioritized list of vulnerabilities that need to be addressed
• Recommendations and specific steps on how to plug the security holes found

Learn how to keep up your security testing momentum at www.dummies.com/extras/hacking.

In this part …

Now that the hard — or at least technical — stuff is over with, it’s time to pull everything together, fix what’s broken, and establish good information security practices to help you move forward.

First, this part covers reporting the security vulnerabilities you discover to help get management buy-in and hopefully more money in your budget to make things right. This part then covers good practices for plugging the security holes within your systems. Finally, this part covers what it takes to manage change within your information systems for long-term success, including outsourcing ethical hacking to help ease the burden of your massive to-do list! That’s what working in information security is all about anyway, right?