Types of vulnerabilities

Types of vulnerabilities

1. Technological

   • TCP/IP Protocol Weakness
   • Operating system weakness
   • Network equipment weakness

2. Configuration

   • Unsecured user accounts
   • System accounts with weak passwords
   • Misconfigured internet services
   • Unsecured default settings within products
   • Misconfigured network equipment

3. Policy

   • Lack of written security policy
   • Politics
   • Lack of authentication continuity
   • Logical access controls not applied
   • Software and hardware installation and changes do not follow policy
   • Disaster recovery plan is nonexistent