HaverbrookInvestment Group, L.L.L.P.

Haverbrook Investment Group L.L.L.P. (HIG) was established in 1935 by Mark Haverbrook as a small-town bank located in Largo, Maryland. Because Mr. Haverbrook believed the customer always comes first, HIG has grown to 350 locations across the United States of America. Beth Haverbrook, granddaughter of Mark Haverbrook, is the current chief executive officer.

Haverbook specializes in financial services, offering a wide range of products, including loans, investment services, insurance, and personal banking.

Haverbrook Investment Group L.L.L.P. (HIG) files annual, quarterly, and current reports along with other information required by the Securities and Exchange Act of 1934, as amended with the Securities Exchange Commission (SEC).

Industry: Financial Services

HQ location: Largo, MD

Employees: 8,738

Global Revenue: $9.7 billion

Total Customers: 8.5 million

Total Products: 25 million

Computers: ports 1/1 -11, 10.4.12(20-31)

Printer 2/1-11, 10.X.X

1 server

1 switch

1 router w/ firewall

Instructions

The first deliverable of the Penetration Test Proposal is the rules of engagement (ROE) document, a formal document that outlines the objectives, scope, methodology, and overall test plan agreed upon by the penetration testers and client system administrators. Penetration testing can cause complications such as network traffic congestion, system downtime, and may cause the same vulnerabilities and compromises it was designed to prevent. Due to the potential consequences of penetration testing, it is vital to agree upon a comprehensive ROE before testing.

For your ROE deliverable, consider the following:

How will you identify Haverbrook Investment Group’s network characteristics, expectations, constraints, critical systems, and other relevant information?

What are your preliminary engagement activities with regard to scheduling, scope, and key stakeholders?

What will you use to establish a binding agreement between Centralia Security Lab and Haverbrook Investment Group?

How will you determine the services, targets, expectations, and other logistics that will be covered during the Rules of Engagement section?

How will you explain to Haverbrook that the tools and techniques to be used in the penetration test will not corrupt data, violate privacy, and are in compliance with industry standards and any applicable laws and regulations?

Penetration Test Proposal

Deliverable 1: Rules of Engagement

Name:

Course Number and Section:

Instructor:

Date:

Rules of Engagement

Overview

Include a brief description of the penetration test project.

Scope

Discuss the scope of the penetration test (pen test).

Checklist

Provide a list of the testing requirements.

Ethical Considerations

Describe how you will apply appropriate ethical principles throughout the penetration testing process.

References

PenetrationTest Proposal

Deliverable 1: Rules of Engagement

Name:

Course Number and Section:

Instructor:

Date:

Rules of Engagement

Overview

In a penetration test project, the Pen Test engineers save lots of documents that is actually recorded at the time of actual system attacks and during them.

I will identify the characteristics, expectations and other relevant information by consulting with the company and taking help from online and physical resources.

Scope

Scheduling and scope will be set after careful consideration of views and opinions given by the officials and employees of the company because they are the people who know the internal workings of the company and they are putting in hard work for it. Stakeholders will be given special attention and considered a priority because business is either done by them or for them.

Checklist

A binding agreement can be formed between two parties by a written promise or contract or the exchange of a valuable item. I will use a written document to establish a binding agreement between Centralia Security Lab and Haverbrook Investment Group. All the terms and conditions proposed by both the parties will be listed and agreed upon with the signatures of the officials related to the ROE.

The services and expectations will be easy to identify ones it is clear what one party is offering and what the other party is receiving. Simple communication will help in the identification process. Targets and other logistics will be set after crafting a milestone schedule that will elaborate when a task is to be performed and till what time or deadline.

Ethical Considerations

A practical implementation will be shown to Haverbrook that will ensure that all the data on their server is fully protected and will not go into the wrong hands while the penetration tests. The books of standard rules will also be provided so they can see for themselves that all the practices are in compliance will the laws and regulations. It will also be ensured that in case anything goes wrong as far as data and confidential information is concerned, our company will be responsible and fix any errors that might show themselves during the process.

References

Rouse, M. (2018, October 31). What is pen test (penetration testing)? – Definition from WhatIs.com. Retrieved February 20, 2020, from

https://searchsecurity.techtarget.com/definition/penetration-testing

What is Penetration Testing: Step-By-Step Process & Methods: Imperva. (n.d.). Retrieved February 20, 2020, from https://www.imperva.com/learn/application-security/penetration-testing/