Assessment Methodology

Get a 3-day consulting services package where Cenzic’s security experts work with key people at the customer site to understand existing processes, conduct testing on an approved Web application, provide training, and develop a strategy to improve Web security throughout the Software Development Life Cycle (SDLC). All for one low price.

The Process

The Cenzic Assessment Methodology Service is structured to produce high impact results within a 3-day period. The project proceeds in four phases, as shown below:

1. Project Planning
   In-depth phone interview to plan for the onsite visit and Web application testing.

2. Review of Policies & Processes
   Onsite security analysis of your processes, procedures, and technology.

3. Onsite Web Vulnerability Testing
   Using our vulnerability scanning technology and manual pen test techniques, Cenzic performs a scan on one of your Web applications. Test categories include infrastructure tests, intrusive and non-intrusive tests, application logic and regulatory compliance.

4. Presentation of Finding & Training
   Cenzic provides a comprehensive security report on policies, processes, technical findings and improvement recommendations. And depending on your needs, Cenzic offers a Secure Code training class for Web developers.

Benefits

• Customized Security Assessment
  Our personalized site visit is designed on a case-by-case basis to address your Web application security needs. And we help you fill in the gaps for a seamless security policy.

• Streamline Processes
  By assessing your current security and infrastructure, we’ll help you improve efficiency and cost savings.

• Industry Expertise
  You’ll receive recommended security process improvements and best practices from Cenzic’s Web application security experts.

• Risk Reduction
  Mitigate risk and liability by building security “from within” through more effective processes, education, and integrated technology.