Penetration Testing / Vulnerability Assessment

Once the appropriate legal documentation has been agreed the testing/assessment team is able to conduct assessments against all types of networks and applications, including wireless networks, VOIP networks, PSTN telephone networks and web applications. Using custom toolkits and well established commercial tools the vulnerability assessment team is able to provide a unique and thorough assessment the likes of which are not possible using automated vulnerability scanners.

This service comprises of the following stages:

Threat Identification
Identification of the threats to you key information assets. This includes an evaluation of the sensitivity or criticality of the information assets.

Vulnerability Analysis
Identification of any vulnerabilities present within the tested network or application

Risk Assessment
This stage is an assessment of the probability that identified vulnerabilities would be exploited and the impact of any exploitation. The evaluation of risks takes into account the sensitivity of threatened information with every recommendation based around BS7799

Countermeasures
This stage identifies any countermeasures to reduce risks to acceptable levels

Business Assurance
> What
A process designed to provide a broad view on the state of the security of a network.
> more

> Who
Public and private sectors should be aware of the limitations of their security technologies and procedures.
> more

> Why
Commissioning an assessment or test provides a level of comfort that security technologies are in place and functioning correctly.
> more

Their staff have always been very knowledgeable and keen to work together with our own internal staff to ensure that maximum benefits are obtained to secure our infrastructure as well as strategic planning and managing a secure technical IT environment. "
Clarel Sookun, Head of IT, Deutsche Postbank > more