10. Post-Assessment Activities

Post-assessment activities deal with reviewing the project’s summary of findings, assessments, and recommendations that are crafted from the IT infrastructure’s risk and vulnerability project final report. Typically, the risk and vulnerability assessment uncovers a multitude of issues, concerns, and security voids inherent in the organization’s IT infrastructure and assets. These issues, concerns, and security voids are then assessed based on the organization’s defined business drivers, goals, and objectives in parallel with the prioritization or importance of the identified IT systems, applications, and resources that support the organization’s business processes and functions.

In many cases, organizations are ...

Get Inside Network Security Assessment: Guarding Your IT Infrastructure now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.