Physical vulnerability assessment

Abstract

Effective infrastructure (security) Vulnerability Assessments require creative and resourceful personnel, whichever methods are employed. It is essential for vulnerability assessors to try to assume the mind-set of the adversaries and to look at vulnerabilities, attacks, and possible countermeasures from their perspective. Unfortunately, a lot of what passes for Vulnerability Assessments is actually Threat Assessment or relatively mundane checking of compliance with formal security regulations and guidelines. It is often highly unimaginative. Brainstorming is a powerful tool for helping, and there are a number of tips for enhancing its effectiveness. Vulnerability assessors also need to be alert to common security mistakes found in many organizations. They must try to avoid the widespread myths about security vulnerabilities and the common Vulnerability Assessment mistakes that hamper analysis.