Security Assessment: Case Studies for Implementing NSA IAM

Chapter 10: Final Reporting

Introduction

Your work is not done once you have completed the onsite assessment. You still need to put out a great deal of effort to ensure that the assessment is of the greatest value to your customer. The analysis and final reporting steps provide the customer with documented results and recommendations along with a road map to greater security. Keeping the focus on making the final report a value-add for the customer will help in this process.

Preparing for Analysis

Before you can create the final report, you must analyze the information collected during the onsite assessment to determine the final findings and impact to the organization. During the analysis process, you ll record initial recommendations and finalize them during the writing of the final report.

Warning

Remember that it is important to remain flexible during the analysis process and not to discount any possible solutions that have not yet been brought up. You may find the best solution is one that addresses multiple findings at once. If you determine a final solution too early in the process, you may limit your ability to come up with the ultimate solution.

Consolidating and Correlating Assessment Information

To begin the analysis process, the team must make a coordinated effort to obtain all the information collected and consolidate it into something useful for the customer. The team leader and the assessment team should be experienced in the steps that make this process flow effectively and efficiently. A well-managed process will assist in the successful...

UNLIMITED FREE
ACCESS
TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Category: Risk Assessment Software
Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.