In order to conduct a cyber security risk assessment, the team at Aurora Security Consulting Services will first define the scope of each process and function being reviewed. Any current documentation regarding policies, procedures, configuration standards, and best practices used will be gathered. Vulnerability scanning will be conducted both internally and externally. Penetration testing will be conducted against your network systems. During a cyber security risk assessment, individuals within the organization will be interviewed and the processes of how the business functions will be documented. The organization’s security practices will be compared against best practices. We will prioritize the gaps and create a remediation plan. A qualitative risk report will be created. The key value propositions of conducting a cyber security risk assessment with Aurora include understanding the gaps in regulatory compliance requirements and understanding the weaknesses in an organization’s existing policies, procedures and standards. Weaknesses within access controls, user provisioning, configuration management, vulnerability management processes, and incident handing processes will be determined.