Learner Name Asadbek Abdusattorov Learner Registration No

Evaluation of the impact of penetration and vulnerability testing has to an organisation

An organization's security plan would be incomplete without regular penetration tests and vulnerability audits. These methods help businesses find and evaluate vulnerable points in their IT systems and infrastructure before they are compromised. The results of these tests may have a major effect on a company by helping them accomplish the following goals: 1. Improve their overall security posture by finding vulnerabilities and taking steps to fix them. Examples of such actions include installing security updates and patches (SANS Institute, 2020).
Organizations must adhere to the industry's norms and rules in order to succeed. (NIST, 2019).
Reduce the likelihood of data breaches, step 3 Exposure of vulnerabilities may result in theft or misuse of private information like as bank records, client lists, and proprietary designs. Organizations may lessen the likelihood of a successful breach by focusing on these vulnerable spots (OWASP, 2019).

Description of end user device protection methods

Devices used by employees, known as end user devices, are increasingly important in today's offices. Therefore, it is crucial to take precautions to ensure the safety of these gadgets. Common techniques of end-user device security include the following:
Virus scanners, number one: The purpose of antivirus software is to identify and eliminate malware. All user devices need to have this software installed, and it must be kept up to date so that it can recognize the most recent threats (SANS Institute, 2020).

Firewalls are a kind of network security device that is used to monitor and manage the flow of data into and out of a network. They may prevent harmful communication from reaching endpoints and restrict unauthorized access to devices (NIST, 2019).

3 Encryption Encryption is the process of encoding information so that it can only be read by someone in possession of the decryption key. Using encryption on end-user devices like laptops and smartphones helps protect users' data from being accessed by an unauthorized third party in the case of a device loss or theft (SANS Institute, 2020).
Fourth, keep your software up-to-date so that your devices are protected from known vulnerabilities and other dangers. Keep your operating system and programs patched to lessen the possibility of being exploited (NIST, 2019).
End-user device security relies heavily on strong passwords, thus it's important to have at least five of them. Passwords should be lengthy and difficult to guess, as well as kept secret. Further, it is important to educate users on secure password practices like multi-factor authentication (SANS Institute, 2020).
In conclusion, businesses may defend themselves from security breaches and safeguard sensitive data by putting these measures in place to secure end-user devices.