Approach
Agree the scope
We agree with you which systems to assess and what the objectives are. We record permissions and excluded tests in writing.
Assess the systems
We assess the agreed systems. We agree methods, test access, direct requests and the level of intervention with you beforehand.
Evaluate findings
We check indications and record their source and date. We mark uncertain results. An automated alert alone does not confirm a finding.
Receive the report
The report separates observations, potential impact and recommended actions. It also identifies areas that were not tested.
Remediation and retesting
You can commission Cyberkern Fix separately after the assessment. Remediation and retesting are not automatically included in the assessment.
Implement changes
We make changes only within the approved scope. We agree responsibilities, backup and rollback options with you beforehand.
Retest changes
We mark remediation as checked only after an appropriate, documented retest. We identify any findings that remain.