Dmytro Yasmanovych Email & Phone Number

- Information Gathering and Reconnaissance: This phase forms the bedrock of my penetration testing methodology, ensuring a thorough understanding of potential attack surfaces.- Scanning and Enumeration: I conduct detailed scanning and enumeration to map out network and system landscapes.Vulnerability Scanning: Utilizing advanced vulnerability scanning tools, I systematically identify and catalog potential security weaknesses. - Exploitation: This phase is critical in revealing how malicious actors could potentially breach systems, providing invaluable insights for strengthening security postures.- Post-Exploitation: In the post-exploitation phase, I meticulously analyze the compromised system to identify additional vulnerabilities and assess the potential for escalated access, ensuring a comprehensive evaluation of security resilience.- Reporting and Communication: Critical to my role is the ability to articulate complex technical findings into clear, comprehensive reports.- Open Source Intelligence (OSINT): I integrate OSINT techniques into my methodology to gather information from publicly available sources.

- Setting up Information Security Management System controls- Policies and Procedures Development- Risk Assessment Lifecycle Management- Setting up Incident Response and Disaster Recovery Processes- Participating in Internal Audit and Certification Audit- Vulnerability Management

- Packing up Technical Services (Methodology, Audit materials, Pre-Sale materials and activities)- Pre-Sale activities- Internal Processes optimization

- CCSSA Service Packing (Methodology, Audit materials, Pre-Sale materials and activities)- Proof of Reserves Service Packing (Methodology, Audit materials, Pre-Sale materials and activities)- ISO27001 Internal Audit and Compliance

Team Leader of PCI DSS Audit projects:- Policies and Procedures Development- Conducting GAP Assessment and Certification Audit with QSA- Configurations Analysis (Network, Cloud, Security tools)- PCI DSS Final documentation preparation (SAQ all types, RoC)ISO 27001 Lead Auditor:- Documentation Development- Leadership of Risk Management Process- Setting up Incident Response, Disaster Recovery, Business Continuity, Logging and Monitoring, Access Control Processes- Leading Internal Audit processes as an External Consultant- Participating in Certification Audit