ChennaiNet

AVARS is an approved methodology as per DNV Verified Superior Information Security Practice. Clients of ChennaiNet scanning their critical assets for vulnerabilities can seek a certification directly from DNV. This compliance based certification is first of its kind for vulnerability assessment processes.

Following is a brief information about the certification schema. More details can be obtained from DNV Website

About Det Norske Veritas, AS (DNV)

DNV is an independent foundation, headquartered in Oslo, Norway, with a global presence of 300 offices in more than 100 countries. With the primary objective to safeguard life, property and the environment, the focus of DNV's business activities is to help their customers manage the risks that they encounter both now and in the future.

About DNV Verified Superior Information Security Practice

In the area of Information Technology, DNV is a leader in the provision of accredited certification services for Information Security (ISO 27001), Services Management (ISO 20000) and Process Management (ISO 9001).

Recognizing the importance for clients to adopt effective tools, techniques and best practices in the area of Information Security Management (ISMS), DNV has put in place a process to evaluate and "approve" supplier processes related to supplementary services that add value to the ISMS certification.

Through an independent evaluation of supplier processes and an endorsement option to the client, DNV strives to enhance the value proposition of the ISO27001 certification. Network Vulnerability Assessment is one such initiative.

DNV has partnered with ChennaiNet to combine its worldwide trusted position as an independent certification body and with ChennaiNet's technical expertise in IT Networks and Information security know-how to bring a highly cost effective and advanced IT vulnerability assessment service.

DNV assessment process

Prior to starting the assessment, a scope is defined. This will outline details of the critical assets to be covered, the compliance requirements that are applicable and the periodicity of the independent assessment by DNV, for example quarterly, six-monthly and yearly.

The client will authorize the access to the remote AVARS platform and DNV assessors will check the status as per the criteria given below, remotely.

On satisfactory assessment, DNV will issue the certificate of recognition against the criteria.