Vulnerability Management - Defend against a cyber attack


Vulnerability Management

Defend against and limit the impact of a cyber attack

With the proliferation of Internet-enabled devices, cyber culture is growing more rapidly than cyber security.

This means private data, intellectual property, cyber-information and even military and national security can be compromised by deliberate attacks, inadvertent security lapses and the vulnerabilities of a relatively immature, unregulated global Internet. Organisations need to continually assess their environments to identify weaknesses and vulnerabilities within their systems before taking the appropriate action to remediate and defend against cyber attack.

How Deloitte can help?

Deloitte can help organisations develop effective solutions linking process, people and technology so that risks are identified, assessed and managed as part of an operational approach to addressing system vulnerabilities. Deloitte team can assist in the following areas:

  • IT Infrastructure – network components, operating systems, databases, middleware based testing
  • Software Application – Web application testing
  • Wireless/ Mobile – Wireless network and IP based mobile testing

Deloitte proposition overview

  • Security Assessments & Ethical Hacking – Putting ourselves in the shoes of hackers on behalf of clients, including architecture assessment, external, internal, Wi-Fi and/or VoIP intrusion tests/penetration tests, and configuration assessments
  • Security Threats & Vulnerability Management – Assessment and optimisation of vulnerability management processes and controls that include: threat identification, risk assessment, remediation, and effective management reporting

Our approach & methodology

Deloitte has developed mature and risk-based proprietary vulnerability management & assessment frameworks and tools:

  • Deloitte Security Assessment Methodology
  • Deloitte Vulnerability Management Lifecycle
  • Deloitte Vulnerability Severity Rating Tool and Knowledge Base
  • Various open source and commercial tools

Vulnerability Management - Cyber Attack - How Deloitte can help?


Roland Bastin

Roland Bastin

Partner | Information & Technology Risk

Roland is a partner within the advisory and consulting department and joined the Risk Advisory practice of Deloitte in 2001. He is responsible for IT audit, IT security, IT regulatory compliance, Data... More

Stéphane Hurtaud

Stéphane Hurtaud

Partner | Information & Technology Risk

Stéphane is a partner within our Risk Advisory practice. He has over 21 years of experience in the IT risk, Information Security and IT audit fields, with a strong focus on the financial services indu... More

Maxime Verac

Maxime Verac

Senior Manager | Information & Technology Risk

Maxime Verac is a Senior Manager within Deloitte’s Information & Technology Risk services in Luxembourg. He has 10 years of experience in Information Security. During the last 10 years, as a consultan... More