Examining Firewalls Across OS Checklist: "Firewall Configuration Checklist." (NetSPI) Identifying Software Versions Device Encryption By OS Identifying if a device is using encryption by OS Encryption availablility by OS Encryption Guides Anti-Virus Updates Identifying Odd/One-Off Services ACTIVITIES DEVICE AND SOFTWARE VERSION ASSESSMENT Summary The auditor checks staff devices for updated systems and software, anti-virus and other security capabilities, and identifies software runing on computers and its current version. The auditor checks for known vulnerabilities to any out of date software. This is used to develop a report component exposing how un-updated software can lead to large vulnerabilities. Overview Identify what privilege level services are running under -- Are users using accounts with admin privelges, or are they using another user and have to type in a password to get admin rights? 46 Check for existence and status of anti-virus (and anti-malware tools) on the device. 47 Record the version and patch levels of software on the device.48 Identify what level of encryption is being used and is available for data storage on the device. 49 Using the list of software versions and patches identify attacks and, if possible, identified malware that devices in the office are vulnerable to. Page 71 of 240