CMIT 321 6384: Penetration Test Proposal Deliverable 4: Final Penetration Test Proposal

Document Content and Description Below

Rules of Engagement 1. Overview Centralia Security Lab (CSL) is working with Haverbrook Investment Group, L.L.L.P. (HIG) to develop a plan to test and asses the security of their information system... s. Penetration testing of the systems will be conducted by CSL staff following specific guidelines outlined in the Rules of Engagement (ROE). This ROE establishes guidelines for CSL staff to conduct assessments and testing of system and network components within HIG. This document also aids to protect both CSL and HIG by authorizing a team to conduct testing and assessments on HIG assets. Penetration testing is a method of evaluating the security of an information system or network by simulating real-world attacks to find vulnerabilities an attacker could exploit (EC-Council, 2018, p.71). Once testing is complete, the CSL team will work closely with HIG to remediate vulnerabilities and offer insight on areas of improvement. 2. Scope CSL will work with HIG management and system administrators to determine the scope of the pen testing. Specific systems or networks to be tested, IP addresses/ranges to be tested, restrictions, exclusions, and various other guidance will be specified by working with HIG staff. HIG reserves the right, at any time during the testing process, to identify prohibited systems, testing times, or IP addresses to be excluded from testing. [Show More]

Last updated: 1 year ago

Preview 1 out of 12 pages