Pre Test Vulnerability Assessment

Identifies and classifies vulnerabilities in systems, networks, and applications
Types:
- Network-based: scans for open ports, services, and potential entry points
- Host-based: examines system configurations, patch levels, and installed software
- Application-based: analyzes web applications, databases, and software
Tools: Nessus, OpenVAS, Qualys
Goals:
- Identify weaknesses and prioritize remediation efforts
- Meet compliance requirements (e.g., PCI DSS, HIPAA)

Laws, regulations, and industry standards that govern cybersecurity practices
Examples:
- GDPR (General Data Protection Regulation)
- HIPAA (Health Insurance Portability and Accountability Act)
- PCI DSS (Payment Card Industry Data Security Standard)
- NIST Cybersecurity Framework
Compliance requirements:
- Risk assessments and audits
- Implementing security controls and procedures
- Training and awareness programs
- Incident response and breach notification

A systematic approach to responding to and managing cybersecurity incidents
Phases:
1. Preparation: establishing incident response plans and procedures
2. Identification: detecting and reporting incidents
3. Containment: isolating affected systems and mitigating damage
4. Eradication: removing malware and repairing systems
5. Recovery: restoring systems and data
6. Post-incident activities: lessons learned and improvement
Goals:
- Minimize damage and downtime
- Restore normal operations quickly and efficiently

Simulated cyber attacks against computer systems, networks, or web applications
Types:
- Network penetration testing: testing network defenses
- Web application penetration testing: testing web application security
- Social engineering penetration testing: testing human vulnerabilities
Goals:
- Identify vulnerabilities and weaknesses
- Evaluate defenses and incident response capabilities
- Meet compliance requirements (e.g., PCI DSS)

Identifying, assessing, and mitigating potential cybersecurity risks
Steps:
1. Risk identification: identifying potential threats and vulnerabilities
2. Risk assessment: evaluating the likelihood and impact of risks
3. Risk mitigation: implementing controls and countermeasures
4. Risk monitoring: continuously monitoring and reviewing risks
Goals:
- Reduce the likelihood and impact of cybersecurity incidents
- Prioritize risk mitigation efforts
- Allocate resources effectively

Mengidentifikasi dan mengklasifikasi kerentanan dalam sistem, jaringan, dan aplikasi
Jenis:
- Berbasis jaringan: memindai port terbuka, layanan, dan titik masuk potensial
- Berbasis host: memeriksa konfigurasi sistem, tingkat patch, dan perangkat lunak yang diinstal
- Berbasis aplikasi: menganalisis aplikasi web, database, dan perangkat lunak
Alat: Nessus, OpenVAS, Qualys
Tujuan:
- Mengidentifikasi kelemahan dan mengutamakan upaya perbaikan
- Memenuhi persyaratan kepatuhan (contoh: PCI DSS, HIPAA)

Undang-undang, peraturan, dan standar industri yang mengatur praktik keamanan siber
Contoh:
- GDPR (General Data Protection Regulation)
- HIPAA (Health Insurance Portability and Accountability Act)
- PCI DSS (Payment Card Industry Data Security Standard)
- Kerangka Kerja Keamanan NIST
Persyaratan kepatuhan:
- Penilaian risiko dan audit
- Menerapkan kontrol keamanan dan prosedur
- Program kesadaran dan pelatihan
- Tanggap insiden dan pemberitahuan pelanggaran

Pendekatan sistematis untuk menanggapi dan mengelola insiden keamanan siber
Fase: 1.Persiapan: mempersiapkan rencana dan prosedur tanggap insiden 2.Identifikasi: mendeteksi dan melaporkan insiden 3.Pengandalian: mengisolasi sistem yang terpengaruh dan mengurangi kerusakan 4.Penghapusan: menghapus malware dan memperbaiki sistem 5.Pemulihan: memulihkan sistem dan data 6.Kegiatan pasca-insiden: pelajaran dan perbaikan
Tujuan:
- Meminimalkan kerusakan dan downtime
- Memulihkan operasi normal dengan cepat dan efektif

Simulasi serangan siber terhadap sistem komputer, jaringan, atau aplikasi web
Jenis:
- Pengujian penetrasi jaringan: menguji pertahanan jaringan
- Pengujian penetrasi aplikasi web: menguji keamanan aplikasi web
- Pengujian penetrasi rekayasa sosial: menguji kerentanan manusia
Tujuan:
- Mengidentifikasi kerentanan dan kelemahan
- Mengetahui kemampuan pertahanan dan tanggap insiden
- Memenuhi persyaratan kepatuhan (contoh: PCI DSS)

Mengidentifikasi, mengetahui, dan mengurangi risiko keamanan siber potensial
Langkah: 1.Identifikasi risiko: mengidentifikasi ancaman dan kerentanan potensial 2.Penilaian risiko: mengetahui kemungkinan dan dampak risiko 3.Mitigasi risiko: menerapkan kontrol dan countermeasures 4.Pemantauan risiko: memantau dan meninjau risiko secara kontinu
Tujuan:
- Mengurangi kemungkinan dan dampak insiden keamanan siber
- Mengutamakan upaya mitigasi risiko
- Mengalokasikan sumber daya secara efektif