SOC Discovery | HyperProtect

SOC SCOPING

QUESTIONNAIRE

Fill out the form below and don't hesitate to contact us if you have further questions.

Physical Locations & On-Premises Device Survey

Number of Physical Locations with DIRECT Internet Access

Total Users

Number of Wi-Fi AP’s Or Controllers

Total Workstations / Laptops

Total External Users/VPN

Total Windows Servers

Total Linux Servers

Total Firewalls

Total Switches/Routers

Cloud Services & SaaS Survey

Cloud Email (Office 365, GSuite, other)

Number of Google Compute Cloud Virtual Machines

Number of AWS Virtual Machines

Number of Azure Virtual Machines

Security Solution Profile (optional)

Please identify the deployed vendor(s) for each category where applicable:

Web Filter / Proxy (Forcepoint, Zscaler, etc..)

Next Generation Firewall

SPAM / Phishing Prevention

Anti-Virus (AV) / Advanced End Point (AEP) / EDR

Cloud Access Security Broker (CASB)

Single Sign On (SSO)

Multi-Factor Authentication (MFA)

Data Leakage Prevention (DLP)

Wireless AP / Controller

Vulnerability Assessment Scoping

The following high-level questions are used for vulnerability assessments:

Enter a number

Number of on-premises internal IP Addresses

If internal scanning is required, identify the number of physical sites requiring scanning and the number of assets at each.

Number of applications to be tested

Please list the vendors and application names if it is a 3rd party commercial application

Number of assets/VM’s in scope that are hosted within a cloud provider (AWS, GCP, Azure, etc..)

Are any homegrown (built in-house) applications? If so, what are they for at a high level?

Are you performing the vulnerability assessment to satisfy a compliance requirement? If so, which regulation(s)?

Penetration Testing Scoping

The following high-level questions are used for penetration testing projects:

Number of external IP addresses that are in scope

If internal testing is required, identify the number of physical sites requiring testing and the number of in scope assets at each.

Number of on-premises internal IP Addresses in scope for testing

Please list the vendors and application names if there are 3rd party commercial applications to be tested

Are any homegrown (built in-house) applications? If so, what are they for at a high level?

Number of assets/VM’s in scope that are hosted within a cloud provider (AWS, GCP, Azure, etc..)

Are you performing the penetration test to satisfy a compliance requirement? If so, which regulation(s)?

Is there a certain date all testing and reporting must be completed by?

Thanks for submitting!