Chevron Cyber Vulnerability Assessment Support
Budget: $30 – $250 USD
I am completing a capstone in cyber-security that requires a formal risk assessment of Chevron’s environment, with the immediate objective of pinpointing vulnerabilities before anything else. I have gathered high-level background information on the company’s infrastructure but need an experienced security professional to guide the technical deep-dive, validate my methodology, and help shape the final submission for academic review.
Scope
• Walk through my current asset inventory and threat model, then refine it so every plausible weakness is captured.
• Use recognised frameworks (NIST, ISO 27005 or similar) to structure the assessment and keep the output academically rigorous.
• Provide clear, evidence-based vulnerability findings and reference the tools or scans you would normally rely on (e.g., Nessus, OpenVAS, CIS Benchmarks) so I can replicate results in the lab.
• Offer concise recommendations that map directly back to each finding—no need to design full controls yet; the class phase we are in ends with vulnerability identification.
Deliverable
A single, well-structured document ready for submission: executive-style cover, methodology section, vulnerability findings table, and a short conclusion that ties risk levels to business impact at Chevron.
Timeline is flexible over the next two weeks, but I prefer iterative check-ins so I can incorporate your feedback into my coursework as we go. If you have prior oil-and-gas or large enterprise experience, please highlight it; otherwise demonstrate solid risk-assessment credentials and familiarity with the frameworks above.
Scope
• Walk through my current asset inventory and threat model, then refine it so every plausible weakness is captured.
• Use recognised frameworks (NIST, ISO 27005 or similar) to structure the assessment and keep the output academically rigorous.
• Provide clear, evidence-based vulnerability findings and reference the tools or scans you would normally rely on (e.g., Nessus, OpenVAS, CIS Benchmarks) so I can replicate results in the lab.
• Offer concise recommendations that map directly back to each finding—no need to design full controls yet; the class phase we are in ends with vulnerability identification.
Deliverable
A single, well-structured document ready for submission: executive-style cover, methodology section, vulnerability findings table, and a short conclusion that ties risk levels to business impact at Chevron.
Timeline is flexible over the next two weeks, but I prefer iterative check-ins so I can incorporate your feedback into my coursework as we go. If you have prior oil-and-gas or large enterprise experience, please highlight it; otherwise demonstrate solid risk-assessment credentials and familiarity with the frameworks above.