Types of Assessments

Question 1

Goal-Based Assessments

Answer 1

• specific goals are defined before testing starts

* tester may attempt to find many unique methods to achieve the specific goals

Question 2

Objective Based Assessments

Answer 2

• seek to ensure information remains secure

* testing occurs using all methods and more accurately simulates a real attack

Question 3

Compliance Based Assessment

Answer 3

• type of objective based assessment
• required to ensure policies or regulations are being followed properly
• regulations provide checklists
• focus on password policies, data isolation, limited network/storage access, and key management

Question 4

Premerger Assessment

Answer 4

• before two companies merge, identify weaknesses inherited, part of due diligence

Question 5

Supply Chain Assessment

Answer 5

• may be required by suppliers to ensure they are meeting cybersecurity requirements
• can be required prior to allowing interconnection between the suppliers systems and organizations systems

Question 6

Red Team Assessment

Answer 6

• conducted by internal testers of an organization during security exercise to ensure defenders (blue team) can perform their jobs adequately