On-Site Assessment Activities

The On-Site Assessment is where the majority of the actual vulnerabilities will be identified for the organization and systems. This identification will include both organizational and technical findings. The way vulnerabilities are identified for the organization and the technical areas are different and are discussed next.

Conducting the Organizational Assessment

The organizational vulnerabilities are identified using the following methods:

▪ Documentation Review

▪ Interviews

▪ System Demonstrations

▪ Observation