[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-253328-105":53,"doc-detail-253328-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","state-of-north-dakota-security-assessment-report-2023-legislative-brief","State of North Dakota - Security Assessment Report - 2023 Legislative Brief","","Network security assessment of key North Dakota state network resources and infrastructure conducted under the direction of the Office of the State Auditor. The engagement evaluated the overall security posture by subjecting internal and external systems to threat-actor-aligned methods, including vulnerability assessment, penetration testing, on-site wireless and physical testing at selected locations, and a custom phishing campaign. Results were presented with risk rating methods, control family and risk categorization, and supporting visualizations to enable proactive remediation before weaknesses are exploited.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/state-of-north-dakota-security-assessment-report-2023-legislative-brief/253328/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/state-of-north-dakota-security-assessment-report-2023-legislative-brief/253328.png","ImageObject",442,249,{"name":88,"@type":89},"Xiajie","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-29","2026-09-13",true,{"@type":98,"interactionType":99,"userInteractionCount":25},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What was the objective of the North Dakota network security assessment?","Question",{"text":108,"@type":109},"To evaluate the overall security posture of the network by testing systems and resources using techniques commonly used by threat actors. The work supports proactive remediation of vulnerabilities before exploitation.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"What activities were performed during the assessment period?",{"text":113,"@type":109},"From 12/07/2021 through 09/30/2022, Secure Yeti conducted vulnerability assessment and penetration testing on internal and external networks of thirteen state-funded entities. On-site wireless and physical tests were also conducted at five locations, and all involved entities were subjected to a custom-built phishing campaign.",{"name":115,"@type":106,"acceptedAnswer":116},"How does the report present risk results?",{"text":117,"@type":109},"The report uses a risk rating system and presents outcomes through risk assignment, control family categorization, and multiple visualizations such as heat maps, line graphs, and pie charts. It also includes key findings and detailed findings sections.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},253328,1791739921,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":25,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":8},8814010472675,"https://avatar.qwps.com/avatar/WGlhamll","State of North Dakota  \nSecurity Assessment Report  \n[2023 Legislative Brief ]  \n[SANITIZED VERSION ]  \nDOCUMENT REVISION HISTORY  \n\n| VERSION | DATE | CHANGE DESCRIPTION |\n| --- | --- | --- |\n| 1.0 | 09/28/2022 | Initial Draft |\n| 1.1 | 12/05/2022 | NDUS Comments & Remarks |\n| 1.2 | 12/21/2023 | ITD Comments & Remarks |\n| 1.3 | 02/14/2023 | State Auditor Comments & Remarks |\n| 1.4 | 02/24/2023 | Final Draft |\n\nSUBMITTED TO:  \nJames Kary Systems Auditor  \nOffice of the State Auditor  \n(701) 328-2580  \n[jkary@nd.gov](jkary@nd.gov)  \nPREPARED BY:  \nCasey Bourbonnais Lead Technical Tester Secure Yeti  \n(918) 986-7060  \n[casey.bourbonnais@secureyeti.com](casey.bourbonnais@secureyeti.com)  \nTABLE OF CONTENTS  \n1. Introduction ................................................................................................................................................................. 4  \n2. Key Participants ........................................................................................................................................................... 5  \n3. Summary of Scope ....................................................................................................................................................... 6  \n4. Exclusions ..................................................................................................................................................................... 7  \n5. Methodology ................................................................................................................................................................ 8  \n6. Risk Rating System ....................................................................................................................................................... 9  \n7. Control Families / Risk Categories ............................................................................................................................ 10  \n8. Executive Summary ................................................................................................................................................... 12  \n8.1. Risk Assignment ................................................................................................................................................ 12  \n8.2. Control Family Categorization .......................................................................................................................... 13  \n8.3. Heat Map (Location/Risk) ................................................................................................................................. 14  \n8.4. Heat Map (Control Family/Risk) ....................................................................................................................... 15  \n8.5. Heat Map (Control Family/Location) ............................................................................................................... 16  \n8.6. Line Graph (Risk Level) ..................................................................................................................................... 17  \n8.7. Line Graph (NIST Control Families) .................................................................................................................. 18  \n8.8. Pie Chart (Risk Level) ........................................................................................................................................ 19  \n8.9. Pie Chart (NIST Control Families) ..................................................................................................................... 20  \n8.10. Key Findings ...................................................................................................................................................... 21  \n8.11. Key Findings (Details) ........................................................................................................................................ 22  \n8.12. Acknowledgments ..................","cbCaiuHfGzpSA9xP","https://ap.wps.com/l/cbCaiuHfGzpSA9xP","pdf",549869,32,"English","# Introduction\n# Key Participants\n# Summary of Scope\n# Exclusions\n# Methodology\n# Risk Rating System\n# Control Families / Risk Categories\n# Executive Summary\n## Risk Assignment\n## Control Family Categorization\n## Heat Map (Location/Risk)\n## Heat Map (Control Family/Risk)\n## Heat Map (Control Family/Location)\n## Line Graph (Risk Level)\n## Line Graph (NIST Control Families)\n## Pie Chart (Risk Level)\n## Pie Chart (NIST Control Families)\n## Key Findings\n## Key Findings (Details)\n## Acknowledgments","[{\"question\":\"What was the objective of the North Dakota network security assessment?\",\"answer\":\"To evaluate the overall security posture of the network by testing systems and resources using techniques commonly used by threat actors. The work supports proactive remediation of vulnerabilities before exploitation.\"},{\"question\":\"What activities were performed during the assessment period?\",\"answer\":\"From 12/07/2021 through 09/30/2022, Secure Yeti conducted vulnerability assessment and penetration testing on internal and external networks of thirteen state-funded entities. On-site wireless and physical tests were also conducted at five locations, and all involved entities were subjected to a custom-built phishing campaign.\"},{\"question\":\"How does the report present risk results?\",\"answer\":\"The report uses a risk rating system and presents outcomes through risk assignment, control family categorization, and multiple visualizations such as heat maps, line graphs, and pie charts. It also includes key findings and detailed findings sections.\"}]","State of North Dakota - Security Assessment Report - 2023 Legislative Brief | PDF",1789265371]