< Home < Risk Management & Internal Audit Services < Technology Risk
< Penetration & Vulnerability Assessment

Penetration & Vulnerability Assessment


A penetration and vulnerability assessment entails a comprehensive analysis of computer systems and networks to determine weak points in your infrastructure. The assessment is targeted toward network connected devices and covers network level vulnerabilities. Common targets include:
  • FTP servers
  • Web servers
  • E-mail servers
  • VPN systems
  • Firewalls
  • Internal file servers
  • Network-level devices

Who normally needs a penetration and vulnerability assessment?

Any company, whether a small local company with less than ten employees, or a large multi-thousand employee nationwide enterprise, may have the need for our services. If your company has trade secret information, confidential client information or simply contains information that is best not made public, you should consider an assessment.

A penetration and vulnerability assessment is typically aimed externally; however, many companies are realizing that there can often be greater risk from inside the network due to disgruntled employees or malicious visitors. We will custom tailor our assessment for your specific needs.

What is the process?

Each assessment is custom designed for your application. We provide an organized report of our findings to management personnel, along with suggestions for improvement, prioritized by urgency. Should we be retained for additional consulting, we can implement our recommendations.

Why should I engage Brown Smith Wallace?

We make A Measurable Difference™. We have experience in dozens of operating systems, hundreds of network protocols, and enterprise level, national-spanning network architecture. We have worked with businesses as small as a local credit union to as large as a big-10 brokerage house.

We are courteous, professional and value your privacy and confidentiality. Our staff stays current on information security trends and exploits making sure you are getting up-to-date security consultation.

What else should I consider?