Focus on what matters most Compucare can help

Non-Stop IT and Network Outages

If your network is having issues or constant Data outage, slow workstations, Internet issues is because you are not taking advantage of the newest technology and applications to manage and maintain a healthy always on always available network infrastructure.

Network assessment report​

Detailed Domain Controller Event Log Analysis Lists the event log entries from the past 24 hours for the directory service, DNS server and file replication service event logs.
Mail Servers Analysis​
Detect Major Applications Detects all major apps/versions and counts the number of installations.SQL Server Analysis Lists the SQL Servers and associated database(s).
Internet Domain Analysis Queries company domain(s) via a WHOIS lookup.
Password Strength Analysis Uses MBSA to identify computers with weak passwords that may pose a security risk.
Missing Security Updates Uses MBSA to identify computers missing security updates.
System by System Event Log Analysis
Discovers the five system and app event log errors for servers.
External Security Vulnerabilities Lists the security holes and warnings from External Vulnerability Scan.

Several critical issues were identified. Identified issues should be investigated and addressed according to the Management Plan.
Summary of issues detected during the Security Assessment. It is based on general industry-wide best practices and may indicate existing issues or points of interest. The Overall Issue Score grades the level of issues in the environment. An Overall Issue score of zero (0) means no issues were detected in the environment. It may not always be possible to achieve a zero score in all environments due to specific circumstances.

Overall Issues Score

Overall Issue Score: Risk Score x Number of Incidents = Total points: Total percent (%)
Compromised Passwords found on the Dark Web (100 pts each) 600 Current Score: 100 pts x 6 = 600: 92.31% Issue: A scan of the Dark Web revealed one or more compromised passwords from your domain. The most recent compromise occurred in 2018. Recommendation: Ensure the compromised passwords are no longer in use. We recommend
risk_scoring_1.png

Critical External Vulnerabilities Detected (95 pts each)

Current Score: 95 pts x 1 = 95: 4.4% Issue: Critical external vulnerabilities may potentially allow malicious attacks from outside your network and should be addressed as soon as possible. External vulnerabilities are considered potential security holes that can allow hackers access to your network and information. Recommendation: Assess the risk of each vulnerability and remediating all external vulnerabilities as prescribed.

Account lockout disabled (77 pts each)

Current Score: 77 pts x 1 = 77: 3.57% Issue: Account lockout (disabling an account after a number of failed attempts) significantly reduces the risk of an attacker acquiring a password through a brute force attack. Recommendation: Enable account lockout for all users.


Recommendations

Password complexity not enabled
Assess the risk of each vulnerability and remediating all external vulnerabilities as prescribed.
Enforcing password complexity limits the ability of an attacker to acquire a password through brute force. Recommendation: Enable password complexity to assure domain account passwords are secure.

Password history not remembered for at least six passwords
Issue: Short password histories allow users to rotate through a known set of passwords, thus reducing the effectiveness of a good password management policy. Recommendation: Increase password history to remember at least six passwords. Inconsistent password policy / Exceptions to password policy

Inconsistent password policy / Exceptions to password policy (68 pts each)
Issue: Password policies are not consistently applied from one computer to the next. A consistently applied password policy ensures adherence to password best practices. Recommendation: Eliminate inconsistencies and exceptions to the password policy

Lack of web filtering
Issue: Access to all websites appears to be unrestricted. This issue does not imply that any particular user is currently accessing restricted sites, but rather that they can. Controlling access to the Internet and websites may help reduce risks related to security, legal, and productivity concerns. Lack of adequate content management filtering to block restricted sites may lead to increased network risk and business liability. Recommendation: Put access controls in place to block websites that violate the company's Internet use policy

Open or insecure WiFi protocols available
Issue: Open or insecure WiFi protocols may allow an attacker access to the company's network and resources. Recommendation: Ensure company's WiFi is secure and discourage the use of any open WiFi connections.