{"id":1827,"date":"2023-01-11T13:29:11","date_gmt":"2023-01-11T13:29:11","guid":{"rendered":"https:\/\/firmussec.com\/sg-dev\/dev\/?page_id=1827"},"modified":"2023-03-02T17:50:53","modified_gmt":"2023-03-02T09:50:53","slug":"security-configuration-review","status":"publish","type":"page","link":"https:\/\/firmussec.com\/sg\/our-services\/assessment\/security-configuration-review\/","title":{"rendered":"Security Configuration Review"},"content":{"rendered":"

Assessment<\/p>\n<\/div>

Strengthen Your Cyber Security with Our Security Configuration Review<\/h2><\/div><\/div><\/div>
<\/div>

FIRMUS\u00a0CREST penetration testing\u00a0will perform the Policy Compliance Assessment by adopting mainly on Center of Internet Security (CIS) as the benchmark.<\/p>\n<\/div><\/div><\/div>

<\/span><\/div><\/div><\/div>

Operating Systems, Databases, and Network Devices comes with their own set of configurations, i.e. security configurations, system configurations, network device configurations, and etc. Some of the organisations practise is to have a checklist of policy compliance for those OS, Database and network devices before the system goes live. This is to ensure those systems \/ devices are hardened before they are placed in a production environment. This is different from vulnerability scanning, as policy compliance audit determines if a system is configured in accordance with an established policy. The organisation will later have a working idea on the type of configuration parameters, security settings, and sensitive information that are crucial and need to be audited. This can be the setting of the logs, the security settings, password policies, and etc.<\/p>\n

FIRMUS CREST penetration testing<\/a> will perform the Policy Compliance Assessment by adopting mainly on Center of Internet Security (CIS) as the benchmark. If an organisation does not have its own policy compliance checklist, FIRMUS will use the CIS checklist for that organisation.<\/p>\n<\/div><\/div><\/div>

Scope of Work<\/h2><\/div><\/div><\/div>
<\/i><\/div>

STAGE 1<\/h3><\/div>
<\/div>
\n

Assessment Preparation & Information Gathering<\/p>\n<\/div>

<\/div><\/div><\/div>
<\/i><\/div>

STAGE 2<\/h3><\/div>
<\/div>
\n

Host Assessment<\/p>\n<\/div>

<\/div><\/div><\/div>
<\/i><\/div>

STAGE 3<\/h3><\/div>
<\/div>
\n

Local Security Policy

<\/div><\/div>\nPassword Policy
<\/div><\/div>\nSystem Configuration
<\/div><\/div>\nFile Permission
<\/div><\/div>\nLogging Services<\/p>\n<\/div>
<\/div><\/div><\/div>
<\/div><\/div><\/div><\/div>
<\/i><\/div>

STAGE 1<\/h3><\/div>
<\/div>
\n

Assessment Preparation & Information Gathering<\/p>\n<\/div>

<\/div><\/div><\/div>
<\/i><\/div>

STAGE 2<\/h3><\/div>
<\/div>
\n

Host Assessment<\/p>\n<\/div>

<\/div><\/div><\/div>
<\/i><\/div>

STAGE 3<\/h3><\/div>
<\/div>
\n

Local Security Policy

<\/div><\/div>\nPassword Policy
<\/div><\/div>\nSystem Configuration
<\/div><\/div>\nFile Permission
<\/div><\/div>\nLogging Services<\/p>\n<\/div>
<\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>

Explore Our Assessment Services<\/h3><\/div>

Let us help you make informed decisions and set your business up for success through our range of assessment services.<\/p>\n<\/div><\/div><\/div>

<\/i><\/div>

Network Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Web Application Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Incident Response (IR)<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Source Code Review<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Mobile Application Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Security Configuration Review<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Social Engineering<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Wireless Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Breach and Attack Simulation (BAS)<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Compromise Assessment<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Intelligence Led Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Network Resiliency Assessment<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Red Teaming<\/p><\/a><\/div><\/div><\/div>

<\/div><\/div><\/div><\/div><\/div><\/div>\n

Talk To Us<\/h2><\/div>
<\/div>

Penetration testing, cyber security strategy, proof-of-value, or just some information? Our domain experts provide bespoke cyber security offerings to solve your digital transformation challenges.<\/p>\n<\/div>

Contact Us<\/span><\/a><\/div><\/div><\/div>