Physical Inspection for a VAPT exercise
Physical Assessment Report
Date: March 28, 2024
Prepared By: CIPANE Cybersecurity Consultants Ltd.
Overview:
This physical assessment report provides an overview of the hardware and network infrastructure of Dignity Finance and Investment Limited. It details the active and retired computing devices, networking equipment, printing devices, and other critical infrastructural components for maintenance and future planning purposes.
Retired computing devices are those that can no longer fulfill the primary operational, technological, or efficiency requirements of the environment in which it's being used.
Systems Information:
Total Systems (Desktops and Laptops): 20
17 in use, 3 not in-use
Total no. of Desktops: 1
Total no. of Laptops: 19
No. of systems running on Windows 11 are 17
No. of systems running on Windows 10 are 3
No. of retired systems: 3
Retired system details:
No.
Device ID
System name
Processor
RAM
OS
Year purchased
System 1
(Laptop)
E40A57B7-8248-4EA1-89BB-AC9053BC6484
Hp
32-bit Intel(R) Pentium(R) CPU P6100 @ 2.00GHz 2.00
6GB
Windows 10 pro
2013
System 2
(Desktop)
CPU
Product ID:--AA725
-
DELL
Vostro
64-Bit Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93ghz 2.93 Ghz
Intel Core Duo
3GB
Windows 10 pro
Windows 7
2013
2013
System 3
(Laptop)
94A0F77F-050F-408E-896C-79345B5A0B56
Zinox
32-bit Pentium(R) Dual-Core CPU T4500 @ 2.30GHz
6GB
Windows 10 pro
2019
Staff Changes:
3 resigned Staff Members
Networking Equipment:
Router: 1
Switch: 1
3 Access Points: 1 on the Business Development Unit, 2 on the upstairs floor
LAN Connection: Present
Printing Devices:
Total No of Printers: 3 (1 retired, 2 functional)
Photocopiers
Details of retired printer:
Hp LaserJet Pro MFP M125nw
Compatibility: Windows 10 (32-bit/64-bit), Windows 8 (32-bit/64-bit), Windows 7 (32-bit/64-bit), and Windows Vista (32-bit/64-bit)
Software Requirements:
All 20 systems require licenses for Microsoft Office 365 and Office Suite.
Power Backup Plan:
UPS and Generator:
A backup power plan is in place with UPS for immediate backup.
Generator backup is available, which comes on within a few minutes.
Recommendations:
1. For optimal productivity and security standards, replace all retired systems and printers with newer hardware due to their age, inefficiency, outdated specifications and slow performance.
2. For the computers, it is best practice to render the RAM completely unusable by destroying it using a hammer or pliers to break the RAM module into small pieces which ensures the RAM chips are shattered, making data recovery impossible.
3. The CPU should also be retired given its launch in 2006 and discontinuation by the manufacturer in 2012, rendering it outdated.
4. Ensure all systems have valid licenses for Microsoft Office to maintain compliance and functionality.
5. Regularly update router, switch, and access point firmware to mitigate security vulnerabilities.
6. Conduct periodic tests of the UPS and generator backup systems to ensure they function as expected during power outages.
7. Maintain updated documentation of hardware and software inventory for future reference and troubleshooting.
Conclusion:
This report provides a comprehensive overview of the current hardware and network infrastructure at Dignity Finance and Investment Limited. For any further inquiries or assistance, please contact the IT department.