Implementing a Successful Security Assessment Process

Author: Bradley Hart Published June 8, 2011 from SANS

The goal of a security assessment, (also known as a security audit or security review), is to ensure that necessary security controls are integrated into the design and implementation of a project. A properly completed security assessment should provide documentation outlining any security gaps between a project design and approved corporate security policies.