An independent review of agreed network systems and basic web applications helps identify potential security weaknesses and give your IT contact practical priorities.
Start with a conversation; no technical knowledge is needed. If you can already describe the review you need, send an inquiry. Scope and pricing follow an understanding of your requirements.
The work can focus on internet-facing systems, an agreed web application, internal network systems, or a combination. Lucerna helps define which review is useful for your environment.
Vulnerability scanning of agreed systems exposed to the internet. For example, a review can focus on the internet-facing network services your business wants assessed.
This gives a view from outside the network. It does not describe the security of every system inside your business.
A basic vulnerability scan of an agreed web application, such as a client portal. Potential findings are examined before they are included in the report.
Basic scanning is not a full application penetration test and does not establish that every application function has been tested.
Vulnerability scanning of agreed systems inside the business network. This can complement an external review when you want a view of internal systems as well.
The systems, access and scanning conditions are agreed before work.
Network and basic web scanning use the appropriate scanning capability within the agreed scope. Internal scans may be credentialed or non-credentialed by agreement. Credentialed scans use authorized access and can provide different visibility; the two approaches are not equivalent. Access arrangements are discussed securely during scoping, not through the inquiry form.
A client questionnaire and relevant public-information exposure review add context to the technical work. Questionnaire responses are reported information; they are not automatically validated vulnerabilities.
For Ontario professional-services firms, including accounting, law, paralegal and financial-services practices, an assessment can help answer a focused question about systems that already support the business.
Suitability depends on the environment, requested work and available capacity. Lucerna complements your IT staff or provider; they continue managing the environment and may carry out fixes.
Book a call to discuss fit, or send a written inquiry if you can describe the systems and review you have in mind. Lucerna may ask questions or suggest a conversation before preparing a proposal.
Agree which systems and activities are included, the access arrangements, schedule and price. Written agreement and authorization come before technical work. New requests require an agreed change.
Carry out the scheduled scanning, gather questionnaire and relevant public-information context, and examine potential findings before reporting them.
Discuss the report and priorities with the owner and IT contact, with limited post-report guidance as agreed.
A consolidated report brings the agreed assessment components together. It is written to help business decision-makers understand the findings and give IT personnel useful detail.
A scheduled assessment is a view at a particular point in time. Quarterly reassessments can be arranged to repeat agreed work; they do not provide continuous monitoring. No assessment guarantees discovery of every weakness or prevention of an incident.
A call helps determine which review fits. If your requirements are already clear, describe them in a written inquiry. Lucerna reviews the needs before proposing scope and pricing.