The Use of Vulnerability Assessments: a Survey

One of the most significant challenges faced by senior business and technology managers is securing organizational data in light of rising threats and compliance requirements. The use of vulnerability assessments has stood out as one strategy to help protect against malicious computer attacks. Vulnerability assessments are conducted to identify security holes within information systems, including networks, servers, and applications. These assessments can be performed by an organization\u27s internal staff or outsourced to a third-party vendor. Outsourcing is especially important for small organizations who typically do not have the resources or expertise to conduct their own vulnerability assessment. This thesis will investigate vulnerability assessments and the security of data in small organizations. Although the literature on information systems security is immense, little seems to exist on the security weaknesses of small organizations and the safeguards that vulnerability assessments can provide. This thesis will examine the literature, develop a methodology, and present the results of survey responses from at least five third-party vulnerability assessment organizations. The study intends to show the common weaknesses faced by small organizations and make recommendations on common countermeasures