RISK & VULNERABILITY ASSESSMENT

Find and Fix

Identify and assess critical weaknesses in a security posture that adversaries can exploit to achieve intended consequences:

• Review security plans to identify potential security weaknesses.

• Develop tactical adversary attack scenarios that attempt to exploit identified security weaknesses.

• Assess (via simulated exercise, modeling and simulation, or other assessment method) the extent to which the security system is able to defeat adversary attack scenarios.

• Develop and assess potential mitigation options to improve security system performance and reduce or eliminate identified weaknesses