Standard security measures, such as firewalls, intrusion detection systems (IDSs) and antivirus software, are commonly available products that guard computers against outsider and insider attacks. The use of a firewall, for example, prevents the access of outsiders to the internal network and an intrusion detection system detects intrusion attempts by outsiders. Inside attacks can be averted through antivirus scans that detect Trojan horses that send confidential information, and by the use of thin clients that operate in a client-server architecture with no personal or sensitive data stored on a client device.

Vulnerability Assessment tools uncover all possible network weaknesses, leaving customers guessing as to which vulnerabilities pose real, imminent threats. Penetration Testing safely exploits vulnerabilities to eliminate "false positives" and reveal tangible threats. Penetration test results enable IT staff to delineate critical security issues that require immediate attention from those that pose lesser risks.
Vulnerability Analysis is the act of determining which security holes and vulnerabilities may be applicable to the target network or host. The vulnerability analysis phase is started. after some interesting hosts are identified via scanning tools and is preceded by the enumeration phase.

Data Security - Data is protected both at rest and in motion Auditability - Appropriate audit of all key activities are maintained