VULNERABILITY ASSESSMENT REPORT

TEMPLATE VULNERABILITY ASSESSMENT REPORT COMPANY NAME Street Address City, State and Zip webaddress.com Version 0.0.0 00/00/0000

VERSION HISTORY
VERSION	APPROVED BY	REVISION DATE	DESCRIPTION OF CHANGE	AUTHOR

PREPARED BY	TITLE	DATE
APPROVED BY	TITLE	DATE

TABLE OF CONTENTS

TABLE OF CONTENTS	2

1.	INTRODUCTION	3

2.	PROJECT SCOPE	3

A.	IN SCOPE	3

B.	OUT OF SCOPE	3

3.	ACTIVITIES SCHEDULE	3

A.	FIRST DAY	3

B.	SECOND DAY	3

C.	THIRD DAY	3

4.	BACKGROUND INFORMATION	3

5.	CLIENT ORGANIZATION	3

6.	ASSET IDENTIFICATION	3

A.	ASSET IDENTIFICATION PROCESS	3

B.	TANGIBLE ASSETS	3

C.	INTANGIBLE ASSETS	3

7.	THREAT ASSESSMENT	3

A.	THREAT ASSESSMENT PROCESS	3

B.	THREATS TO THE CLIENT ORGANIZATION	3

B1. NATURAL THREATS	3

B2. INTENTIONAL THREATS	3

B3. UNINTENTIONAL THREATS	3

8.	LAWS, REGULATIONS, AND POLICY	3

9.	FEDERAL LAW AND REGULATION	3

10.	CLIENT ORGANIZATION POLICY	3

A.	VULNERABILITIES: CLIENT ORGANIZATION POLICY	3

11.	PERSONNEL	3

A.	MANAGEMENT	3

B.	OPERATIONS	3

C.	DEVELOPMENT	3

D.	VULNERABILITIES: PERSONNEL	3

12.	NETWORK SECURITY	3

A.	PUBLIC NETWORK RESOURCES AND SITES	3

B.	PARTNER CONNECTIONS AND EXTRANETS	3

C.	VULNERABILITIES: NETWORK SECURITY	3

13.	SYSTEM SECURITY	3

A.	VULNERABILITIES: SYSTEM SECURITY	3

14.	APPLICATION SECURITY	3

A.	VULNERABILITIES: APPLICATION SECURITY	3

15.	OPERATIONAL SECURITY	3

A.	VULNERABILITIES: OPERATIONAL SECURITY	3

16.	PHYSICAL SECURITY	3

A.	VULNERABILITIES: PHYSICAL SECURITY	3

B.	VULNERABILITIES: BUILDING	3

C.	VULNERABILITIES: PERIMETER SECURITY	3

D.	VULNERABILITIES: SERVER AREA	3

17.	SUMMARY	3

18.	ACTION PLAN	3

19.	REFERENCES	3

INTRODUCTION

PROJECT SCOPE

IN SCOPE

OUT OF SCOPE

ACTIVITIES SCHEDULE

FIRST DAY

SECOND DAY

THIRD DAY

BACKGROUND INFORMATION

CLIENT ORGANIZATION

asset identification

Asset identification process

tangible assets

intangible assets

threat assessment

threat assessment process

threats to the client organization

b1. natural threats

b2. intentional threats

b3. unintentional threats

laws, regulations, and policy

federal law and regulation

client organization policy

VULNERABILITIES: CLIENT ORGANIZATION POLICY

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

PERSONNEL

MANAGEMENT

OPERATIONS

DEVELOPMENT

VULNERABILITIES: PERSONNEL

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

NETWORK SECURITY

PUBLIC NETWORK RESOURCES AND SITES

PARTNER CONNECTIONS AND EXTRANETS

VULNERABILITIES: NETWORK SECURITY

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

SYSTEM SECURITY

VULNERABILITIES: SYSTEM SECURITY

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

APPLICATION SECURITY

VULNERABILITIES: APPLICATION SECURITY

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

OPERATIONAL SECURITY

VULNERABILITIES: OPERATIONAL SECURITY

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

PHYSICAL SECURITY

VULNERABILITIES: PHYSICAL SECURITY

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

VULNERABILITIES: BUILDING

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

VULNERABILITIES: PERIMETER SECURITY

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

VULNERABILITIES: SERVER AREA

VULNERABILITY EXPLANATION	RISK	RECOMMENDATION

SUMMARY

ACTION PLAN

REFERENCES

DISCLAIMER Any articles, templates, or information provided by Smartsheet on the website are for reference only. While we strive to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability, or availability with respect to the website or the information, articles, templates, or related graphics contained on the website. Any reliance you place on such information is therefore strictly at your own risk.