penetration-testing.md

Penetration Testing

• An evaluation of the holistic approach in terms of cyber security
• • active and passive security scanning of vulnerabilities
  • Open-Source Software (OSS) vulnerability scanning
  • Security policies analysis
  • Analysis of history of public vulnerabilities
  • CRVS product provider response/management and communication to users
  • Analysis of the security of data at rest and in motion
  • Analysis of security guidelines/documentation (including resilience and recovery recommendations)
  • Aase of user interface for setting roles and status visibility.

1. Introduction & Objectives
2. Scope of Work
3. Methodology
4. 1. Planning
   2. Risk Classification
5. Tools and Scanners
6. Identified Vulnerabilities / Findings
7. Miscellaneous Issues / Non-Findings
8. Conclusion