Risk Reduction Services

Typical Timeline of Initial Test: Dependent on environment complexity
Scheduling Kickoff: Within 2 weeks after ROE is signed
Remediation Retest Policy: Free within 30 days of initial report delivery

• Once the client has financed the project GoVanguard will provide the client with a ROE (Rules of Engagement) document that outlines the scope of the tested client information systems, project assumptions and GoVanguard’s commitment to client’s information system’s Confidentiality, Integrity and Availability (CIA).
• White box analysis of client information systems requires that GoVanguard either ships or deliver in-person GoVanguard’s network scanning appliance.
• GoVanguard requires certain standard prerequisites to be satisfied before the project is officially started. These prerequisites include:
  • Any diagrams and documentation pertinent to network and sever infrastructure.
  • A list of all corporate VLANs/subnets (in CIDR notation).
  • A list of all point-of-interest infrastructure IP addresses (AD DC’s, Hypervisors, Firewalls, Core Switches…etc.).
  • Full read-only access to all configuration files pertaining to any of the following information systems:
    • Network Infrastructure (Firewalls, Switches, Routers, WAPs…etc)
    • Active Directory
    • Hypervisors
    • Servers (Windows and/or Linux)
• Once the client has satisfied all the project prerequisites, GoVanguard will perform the white box network penetration testing in a 24×7 format over the course of the predefined project timeline. Special attention is provided to ensure client information system CIA remains unaffected throughout the project. During this time, GoVanguard focuses on assessing the client’s information systems for weaknesses and vulnerabilities by collecting and analyzing corporate network traffic and system configurations.
• After the first white box network penetration test is completed, GoVanguard will present the report findings with the client and discuss the mitigation recommendations provided in the report.
• GoVanguard will provide the client with 30 days to remediate prioritized risks for their information systems.
• After the 30 day remediation period, GoVanguard will perform rescanning/analysis of the same information systems to validate if previous risks were indeed remediated.
• GoVanguard will then present and provide the client with a post risk remediation white box network penetration test report.

• PTES White Box Network Penetration Testing Report