It’s a systematic check of your Information Security systems, controls, protocols and procedures. We rigorously test the systems that you put in place to protect your business.

But a thorough assessment doesn’t end there, Information Security penetration testing doesn’t end at the external electronic perimeters of your company firewall.  It must also challenge the physical boundaries of your business including building security and staff responses to a security breach.

Then we deliver a comprehensive report detailing the strengths and weaknesses of your protection from physical and electronic intrusion.

Why should you use a Penetration Test?

• If you have installed a new computing system, you’ll want us to test its vulnerability.
• If you’ve installed a new alarm system in your office, you may need to test its effectiveness before its first real world test.
• If you’re about to make a number of people redundant, you may wish to test that they don’t have access to anything sensitive.

The most common type of Penetration Test is the Website Test. Generally speaking, our clients want to test their vulnerability after making changes to their website.  Our test reveals any potential for exploitation.

What do I get from a Penetration test?

Securm advise that a full, professional Penetration Test should include the following as minimum best practice:

Technical report – Written in the language of your technical staff.  It details all technical findings from missing patches to potentially exploitable vulnerabilities.  Your staff can use this report to immediately implement changes.

Executive report – Written in plain Boardroom English.  It details the findings of the test in clear and concise language.  It outlines that risk of each vulnerability against the ease of potential exploitation.

Methodology – Explains what tests will be carried out. Details when and what the results were.

Electronic Audit Logs – Access to the test logs if you wish for a second opinion.

Audio and video logs – Evidence of physical security breaches.

Team Reports – Explains what each tester did and what the outcome was.

Finally, you should have meeting with the Testing Manager to discuss all aspects of the testing and present the report to your Board and technical staff.  They will also answer any questions about the test.

What assurances should testers provide?

All testers should provide the following as a minimum standard:

• References from two previous clients
• Proof of Insurance
• Contract
• Non Disclosure Agreement (approved by your legal team)
• Details of Testing Methodology