Assurance Report on Security Assessment of Decisions Solution

This document is an assurance report that outlines the security assessment and penetration testing performed by H-X Technologies on the Decisions solution, which includes various integrations and mobile applications. The assessment was conducted from January 5, 2024, to March 14, 2024, based on a request from the customer and the agreed Statements of Work. The primary objective was to identify and assess security vulnerabilities within the target applications, including the Decisions Meeting Secretary for Microsoft Outlook and Decisions for Microsoft Teams, among others. The penetration testing methodology followed established guidelines such as OWASP and NIST, and involved both manual and automated techniques. The assessment included detailed procedures for testing, identifying vulnerabilities, and ensuring the confidentiality and integrity of the application data. The report also describes the rules of engagement, the scope of testing, and the types of vulnerabilities checked according to the OWASP top 10 framework, ensuring a thorough evaluation of security risks and potential threats.