Editing Vulnerability assessment (section)

== Standardized Government Vulnerability Assessment Services ==
 
The GSA (also known as the [[General Services Administration]]) has standardized the “Risk and Vulnerability Assessments (RVA)” service as a pre-vetted support service, to rapidly conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations, enterprise or local policy, assess the level of risk, and develop and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. This standardized service offers the following pre-vetted support services:
* Network Mapping
* Vulnerability Scanning
* Phishing Assessment
* Wireless Assessment
* Web Application Assessment
* Operating System Security Assessment (OSSA)
* Database Assessment
* Penetration Testing

These services are commonly referred to as Highly Adaptive Cybersecurity Services (HACS) and are listed at the US GSA Advantage website.<ref>{{cite web |url= https://www.gsaelibrary.gsa.gov/ElibMain/sinDetails.do?executeQuery=YES&scheduleNumber=70&flag=&filter=&specialItemNumber=132+45D |title= 132-45D Risk and Vulnerability Assessment Companies |date=20 March 2018}}</ref>

This effort has identified key service providers which have been technically reviewed and vetted to provide these advanced services.  This GSA service is intended to improve the rapid ordering and deployment of these services, reduce US government contract duplication, and to protect and support the US infrastructure in a more timely and efficient manner.

132-45D Risk and Vulnerability Assessment <ref>{{cite web |url= https://www.gsa.gov/technology/technology-products-services/it-security/highly-adaptive-cybersecurity-services-hacs |title= 132-45D Risk and Vulnerability Assessment |date=20 March 2018 }}</ref> identifies, quantifies, and prioritizes the risks and vulnerabilities in a system. A risk assessment identifies recognized threats and threat actors and the probability that these factors will result in exposure or loss.