Network Security
The building blocks of a network that actually contains a compromise instead of handing an attacker everything at once.
Insecure VPN & Remote Access Configuration
A VPN with weak authentication, an outdated protocol, or overly broad access once connected gives a remote attacker the same reach as someone plugged directly into the internal network.
Ceiling: CriticalInsecure Wireless Network Configuration
A weak Wi-Fi encryption standard, a guessable pre-shared key, or a network with no defense against a rogue access point gives an attacker a way onto the network without ever touching a cable.
Ceiling: HighInsufficient Network Monitoring & Intrusion Detection
A network with no meaningful visibility into its own traffic lets an intrusion run for as long as it likes, not because the attacker is sophisticated, but because nothing was watching to notice.
Ceiling: CriticalNetwork Segmentation Failures
A flat network with no isolation between systems of different trust levels lets a single compromised device reach far more than it should, turning one small incident into a full breach.
Ceiling: CriticalUnencrypted Network Protocols in Use
A legacy service still carrying credentials or sensitive data over an unencrypted protocol hands anyone positioned on the network path everything it transmits, in plain, readable form.
Ceiling: CriticalWeak or Missing Network Access Controls
A firewall or access-control-list rule written broader than necessary lets traffic reach a system that should never have been directly exposed to it in the first place.