What Is a penetration test?

embryo4160002021-01-24T20:53:44+00:00June 26th, 2020|

What are the different types of penetration test?

embryo4160002021-01-24T20:55:05+00:00June 26th, 2020|

What is the difference between vulnerability scanning and penetration testing?

embryo4160002021-01-24T20:56:09+00:00June 26th, 2020|

Why should we have a penetration test?

embryo4160002021-01-25T12:32:11+00:00June 26th, 2020|

What should we expect from a penetration test?

embryo4160002021-01-24T21:00:21+00:00June 26th, 2020|

Let’s make your business more cyber-secure

Q: What Is a penetration test?

A penetration test (also known as a pen test or ethical hacking) is a fully-sanctioned hacking attempt that targets your organisation’s IT network infrastructure, applications and employees. The purpose of these tests is to identify security risks by actively attempting to exploit weaknesses in a controlled fashion. Information gathered during penetration testing allows you to proactively strengthen your organisation’s security practices.

Q: What are the different types of penetration test?

Penetration tests usually fall into one of the following categories: Networks and Infrastructure (Internal, External, Mobile Devices, Wireless) Applications (Mobile, Web, Web Service/API, Thick Client) Physical Security & Social Engineering Red Teaming (which encompasses any or all of the above)

Q: What is the difference between vulnerability scanning and penetration testing?

A Vulnerability scan looks for known vulnerabilities in your systems and reports potential exposures, often forming part of information gathering for a penetration test. Penetration tests are intended to exploit weaknesses in the architecture of your IT networks, systems, and applications. They determine the degree to which a malicious attacker can gain unauthorised access to your assets. A vulnerability scan is typically automated, while a penetration test is a manual test performed by a security professional. Both elements are important, typically vulnerability scans are done on a more frequent basis and penetration tests on a less frequent basis

Q: Why should we have a penetration test?

Penetration testing should be done for a number of reasons, including: To uncover major vulnerabilities and prioritise your vulnerabilities into low, medium and high risks, then give you an opportunity to fix these vulnerabilities. To help you enforce your security strategy and identify any further security controls you need to implement if poor internal security processes are revealed. To show your security team in real-time how attack vectors impact the organisation. To give your organisation and team more confidence, with a new perspective on your network, application and data To help inform governance and compliance improvements, possibly as your organisation aligns with industry security standards To train your security team on how to better detect and respond to threats, while introducing newer security technologies To test your team’s ability to conduct remediation and incident reporting. To allow your team to optimise their incident response process To protect your most critical data To provide your management and leadership team with insightful reports To strengthen customer trust and loyalty by demonstrating your commitment to security

Q: What should we expect from a penetration test?

A Cognisys penetration test is well-coordinated, planned, documented and communicated. You will know what is happening and when. Our process is disciplined, repeatable and defined within our testing methodology and our ISO27001 controls. Our approach and targets are customised to suit the unique environment and requirements of your business, for each individual test. Our clear initiation, planning, testing, reporting and collaborative delivery process ensures accurate results and a clear understanding of the remediation process. We use a blended approach to ensure our clients always have the most appropriate skillsets for all areas of the testing, providing the very best service at a fair price.

Book a Free Consultation

sales@cognisys.co.uk

Call us 01422 416000

FAQs

What Is a penetration test?

What are the different types of penetration test?

What is the difference between vulnerability scanning and penetration testing?

Why should we have a penetration test?

What should we expect from a penetration test?

Let’s make your business more cyber-secure

Improve your Cyber Security. Let us find the gaps before the bad guys do.

Testing

Compliance

Managed Services

Resources