Defense IT Solutions Managed Services is a suite of cybersecurity consulting and assessment services offered by Defense IT Solutions Inc. The service portfolio covers five primary areas: **Penetration Testing** Offers black box and white box testing methodologies, covering network/application penetration testing, web application penetration testing (including SQL injection, XSS, and CSRF), social engineering (phishing emails and phone calls), and physical/premise security testing. **Vulnerability Assessment** Conducted from internal or external perspectives, assessments cover internal network vulnerability scans (useful for patch management verification), external assessments targeting internet-facing systems (firewalls, web servers, mail servers), and web application assessments based on OWASP guidelines targeting SQL injection, XSS, and XSRF vulnerabilities. **Risk Assessment** Partially derived from NIST SP 800-30, this service identifies threats and evaluates both quantitative and qualitative risk values. Risk is assessed based on data classification, industry context, and existing security controls. **Policy Development** Assists organizations in developing security policies. **3rd Party Vendor Assessment** Evaluates security risks associated with third-party vendors. Consultants are described as having hands-on technical administration and engineering experience, with training on current technologies. The services are aimed at helping organizations understand their security posture, meet compliance requirements, and establish risk management programs.