Site survey definition
A site survey evaluates the security posture and vulnerabilities of a physical location or a wireless network. It can include various activities. For instance, organizations can assess the physical security controls, identify potential vulnerabilities in the network infrastructure, and analyze the signal strength and coverage of wireless access points. Either way, the goal of the site survey is the same — to gather information about the existing security risks and vulnerabilities and identify areas for improvement. Organizations can then use these insights to respond with proper controls and measures to mitigate or eliminate security risks and threats.
See also: vulnerability, vulnerability assessment
Site survey examples
- Wireless network site survey. It analyzes wireless access points' signal strength, coverage, and interference to identify performance issues. Usually, it entails performing signal strength tests, identifying rogue access points, and testing for threats.
- Physical security site survey. Organizations can evaluate their physical security controls, including locks, cameras, and access controls, to detect potential vulnerabilities. They can do so by testing door locks, assessing camera coverage, and evaluating access control mechanisms.
- Vulnerability assessment site survey. Analyzing the network infrastructure and systems helps organizations identify misconfigurations. Typically, it includes scanning for vulnerabilities, reviewing system configurations, and testing for familiar security weaknesses.
- Application security site survey. This process can help users evaluate their app, database, OS, or software security posture using penetration testing, analyzing the application code, and reviewing system logs.
- Network infrastructure assessment site survey. Organizations can review the network topology, test firewall rules, and scan for open ports to analyze their network infrastructure, including routers, switches, and firewalls, to identify potential vulnerabilities and misconfigurations in the network.
- Environmental assessment site surve y. Users can test backup power systems, evaluate HVAC systems and the physical location of critical systems to assess the physical and environmental factors that may impact security, such as temperature, humidity, and power supply.
