Chapter 1
Security Operations
Course: Comptia Cysa Cso 003
Subject: Comptia Cysa Plus Cso 003
Chapter: Vulnerability Management
Vulnerability scanning involves systematically identifying, analyzing, and documenting security weaknesses within an organization's information technology environment. It helps organizations understand their cybersecurity posture and prioritize remediation efforts.
1. Asset Discovery
Asset discovery involves systematically identifying and cataloging every piece of hardware and software connected to an organization's network. It is a critical first step in vulnerability management because you cannot effectively secure or mitigate vulnerabilities on assets that you do not know exist.
Importance of Asset Discovery:
- Enables complete visibility of the network infrastructure.
- Facilitates accurate vulnerability assessments and targeted remediation efforts.
- Ensures compliance with regulatory frameworks by maintaining detailed asset inventories.
- Supports incident response activities by quickly identifying impacted devices during security incidents.
A. Map Scans
Map scans, sometimes called network scans, identify live hosts, services, open ports, and network topology by systematically probing the network. Tools like Nmap (Network Mapper) are typically employed.