The Security Assessment is a process where security expert uses his/her knowledge and experience to spot problems and recommend changes to improve security.
Use cases
Reduce risk of loss of customer trust or revenue due to incident downtime and lost sales
Maintain stakeholder expectations and avoid penalties due to contracts or law
Reduce incidents that take focus away from the actual business
Get rid of Fear, Uncertainty and Doubt (FUD). Unclear security may misdirect efforts
Identify any technical gaps relating to GDPR
Value Proposition
Allows identifying and resolving security issues. The assessment improves security understanding, and this helps avoiding similar items in future.
Learning about security reduce rework due to security, and increase efficiency of security work.
Opportunity for process improvement. Root causes for identified issues often point to gaps in secure development life cycle. Assessment may also validate success of already done security improvements.
Support decision making with factual information about current state of security. Identifies technical debt relating to security for planning.