Pre Test Vulnerability Assessment

Cybersecurity Test

Vulnerability Assessment

• Identifies and classifies vulnerabilities in systems, networks, and applications
• Types:
  • Network-based: scans for open ports, services, and potential entry points
  • Host-based: examines system configurations, patch levels, and installed software
  • Application-based: analyzes web applications, databases, and software
• Tools: Nessus, OpenVAS, Qualys
• Goals:
  • Identify weaknesses and prioritize remediation efforts
  • Meet compliance requirements (e.g., PCI DSS, HIPAA)

Compliance and Regulations

• Laws, regulations, and industry standards that govern cybersecurity practices
• Examples:
  • GDPR (General Data Protection Regulation)
  • HIPAA (Health Insurance Portability and Accountability Act)
  • PCI DSS (Payment Card Industry Data Security Standard)
  • NIST Cybersecurity Framework
• Compliance requirements:
  • Risk assessments and audits
  • Implementing security controls and procedures
  • Training and awareness programs
  • Incident response and breach notification

Incident Response

• A systematic approach to responding to and managing cybersecurity incidents
• Phases:
  1. Preparation: establishing incident response plans and procedures
  2. Identification: detecting and reporting incidents
  3. Containment: isolating affected systems and mitigating damage
  4. Eradication: removing malware and repairing systems
  5. Recovery: restoring systems and data
  6. Post-incident activities: lessons learned and improvement
• Goals:
  • Minimize damage and downtime
  • Restore normal operations quickly and efficiently

Penetration Testing

• Simulated cyber attacks against computer systems, networks, or web applications
• Types:
  • Network penetration testing: testing network defenses
  • Web application penetration testing: testing web application security
  • Social engineering penetration testing: testing human vulnerabilities
• Goals:
  • Identify vulnerabilities and weaknesses
  • Evaluate defenses and incident response capabilities
  • Meet compliance requirements (e.g., PCI DSS)

Risk Management

• Identifying, assessing, and mitigating potential cybersecurity risks
• Steps:
  1. Risk identification: identifying potential threats and vulnerabilities
  2. Risk assessment: evaluating the likelihood and impact of risks
  3. Risk mitigation: implementing controls and countermeasures
  4. Risk monitoring: continuously monitoring and reviewing risks
• Goals:
  • Reduce the likelihood and impact of cybersecurity incidents
  • Prioritize risk mitigation efforts
  • Allocate resources effectively

Ujian Keamanan Siber

Penilaian Kerentanan

• Mengidentifikasi dan mengklasifikasi kerentanan dalam sistem, jaringan, dan aplikasi
• Jenis:
  • Berbasis jaringan: memindai port terbuka, layanan, dan titik masuk potensial
  • Berbasis host: memeriksa konfigurasi sistem, tingkat patch, dan perangkat lunak yang diinstal
  • Berbasis aplikasi: menganalisis aplikasi web, database, dan perangkat lunak
• Alat: Nessus, OpenVAS, Qualys
• Tujuan:
  • Mengidentifikasi kelemahan dan mengutamakan upaya perbaikan
  • Memenuhi persyaratan kepatuhan (contoh: PCI DSS, HIPAA)

Kepatuhan dan Regulasi

• Undang-undang, peraturan, dan standar industri yang mengatur praktik keamanan siber
• Contoh:
  • GDPR (General Data Protection Regulation)
  • HIPAA (Health Insurance Portability and Accountability Act)
  • PCI DSS (Payment Card Industry Data Security Standard)
  • Kerangka Kerja Keamanan NIST
• Persyaratan kepatuhan:
  • Penilaian risiko dan audit
  • Menerapkan kontrol keamanan dan prosedur
  • Program kesadaran dan pelatihan
  • Tanggap insiden dan pemberitahuan pelanggaran

Tanggap Insiden

• Pendekatan sistematis untuk menanggapi dan mengelola insiden keamanan siber
• Fase: 1.Persiapan: mempersiapkan rencana dan prosedur tanggap insiden 2.Identifikasi: mendeteksi dan melaporkan insiden 3.Pengandalian: mengisolasi sistem yang terpengaruh dan mengurangi kerusakan 4.Penghapusan: menghapus malware dan memperbaiki sistem 5.Pemulihan: memulihkan sistem dan data 6.Kegiatan pasca-insiden: pelajaran dan perbaikan
• Tujuan:
  • Meminimalkan kerusakan dan downtime
  • Memulihkan operasi normal dengan cepat dan efektif

Pengujian Penetrasi

• Simulasi serangan siber terhadap sistem komputer, jaringan, atau aplikasi web
• Jenis:
  • Pengujian penetrasi jaringan: menguji pertahanan jaringan
  • Pengujian penetrasi aplikasi web: menguji keamanan aplikasi web
  • Pengujian penetrasi rekayasa sosial: menguji kerentanan manusia
• Tujuan:
  • Mengidentifikasi kerentanan dan kelemahan
  • Mengetahui kemampuan pertahanan dan tanggap insiden
  • Memenuhi persyaratan kepatuhan (contoh: PCI DSS)

Manajemen Risiko

• Mengidentifikasi, mengetahui, dan mengurangi risiko keamanan siber potensial
• Langkah: 1.Identifikasi risiko: mengidentifikasi ancaman dan kerentanan potensial 2.Penilaian risiko: mengetahui kemungkinan dan dampak risiko 3.Mitigasi risiko: menerapkan kontrol dan countermeasures 4.Pemantauan risiko: memantau dan meninjau risiko secara kontinu
• Tujuan:
  • Mengurangi kemungkinan dan dampak insiden keamanan siber
  • Mengutamakan upaya mitigasi risiko
  • Mengalokasikan sumber daya secara efektif