Executive Summary
CPP Associates conducted a basic vulnerability assessment for The Well Known NYC Media
Company and this document will provide a summary of our findings and recommendations.
During the assessment, CPP Associates personnel did their best to uncover information about
specific IT practices currently in use in your business, and we have listed them in this document.
The assessment conducted by our team is a technical review of your IT network and systems. It
is important to note that this is not an audit from a security risk perspective. Although we look
for evidence of controls and adherence to a set of specifications or control framework, it is a
valuation of your practices. Our main objective is to provide you with a professional opinion and
insight as to the technical soundness of your IT environment from the perspective of
conventional practices utilized in the industry.
The methodology used by us for this assessment consisted largely of a comparison of your
environment as we interpreted it against industry best practices. Information collected by us
about your environment consisted of documents provided to us from you at the on-set of the
engagement as well as information we collected while onsite and through communications with
your personnel. A good portion of the information we gather is first-hand through the onsite
examination of servers, workstations, and network infrastructure. The specific applications and
business processes are identified by you. We look at a sample of the workstations to get an
understanding of how these applications and processes utilize the IT systems as well as the
performance as experienced by the end user.
During the assessment CPP Associates found Well Known NYC Media Company infrastructure
needs important changes to their environment to improve efficiency for both network and
Systems. Well Known NYC Media Company daily operations are at significant risk while running
with the current hardware configuration. We have determined storage, switching, and security
as our paramount concerns. These areas are highlighted below. This executive summary
provides an overview of the issues, and the remainder of the document outlines in detail what
those issues are and the remediation plan to go forward.
Many, if not all the issues found, are deficiencies or diversions from best practices on equipment
and solutions delivered from the previous partner. Issues found outside of the relationship with
the previous partner are standard issus that CPP sees across most, if not all environments that
are the result of the urgent often crowding out the important.