IT Network Assessment

A network security assessment is a comprehensive approach to detecting threats to your organisation regardless of whether these are cyber threats, policy violations or data leakage and control.

Most organisations focus their security assessments purely around detecting potential vulnerabilities using assurance testing, despite having a lack of capability and network visibility to fully understand user and network activity, whether they are already in a state of compromise and how to effectively develop their security program with actionable intelligence.

Our network security assessment is a layered approach using a synoptic stack of forensic monitoring combined with multiple threat detection engines. This assessment is monitored remotely by our security analysts, with the addition of a comprehensive review, validation of security alerts and threat hunting within the collected dataset. 

Our expertise in network forensics is a key differentiation as this level of assessment is typically only available to larger organisations due to the technical specialism and associated costs. These assessments are a fixed engagement designed to fully technically assess an organisation’s current security standpoint and overall resilience against cyber threat. 

Some typical findings we have identified for clients in recent assessments include:

  • Unencrypted mail traffic (SNMP/POP3/IMAP)
  • Plaintext and weak encoded passwords to external services
  • Data exfiltration via personal cloud storage (Dropbox/Google Drive/OneDrive)
  • Plaintext LDAP/AD authentication to/from external services, exposing live corporate and Admin credentialsCompromised machines (Mac/Windows/Android)
  • Peer-to-Peer file sharing (BitTorrent)
  • Detection of Potentially unwanted programs (PUP’s)
  • Detection of Superfish (Lenovo Pre-installation)
  • Unencrypted SIP & RTP (VoIP)
  • Misconfiguration of NAS storage replicating data in plaintext between sites
  • Unencrypted data sync to cloud storage
  • Unsupported and vulnerable operating systems (XP/Vista/2003/2008)
  • Outdated software (Flash/Silverlight/Quicktime)
  • Unapproved remote access software on user device (TeamViewer/LogMeIn/GoToMyPC)
  • Inappropiorate business web browsing (Pornography/Gambling/Violence)

Get a Network Security Assessment for Your Business

Interested to understand how our Network Security Assessments can provide actionable insights for your organisation? Please talk to our experienced team working in Guildford, Surrey, London and beyond.