CST | Penetration Testing

CST Corporate Brochure

	Penetration Testing

One of the key steps to measure Operational Risk is the need to identify and understand network vulnerabilities. The end result is the same, although the motives may be different and typically embrace one or more of the following five objectives

Policy mandate to undertake periodic testing.
Acceptance of a new system in regards to its security stance.
Validate that a previously discovered exploit has been adequately closed.
Ad hoc sanity check of security precautions.
Compliance & Audit directives.

Pen testing is ideal tool to improve an organisation's security posture.

Types of tests

Infrastructure (Public, Private, WAN's, LAN's, Mobile phone and VoIP)

Application (Native web apps as well as legacy hybrid systems).

Network (Desktop, Server, Profiles and Data)

RAS & VPN (lost laptop, VPN, War dialling and Wifi).

Social engineering (Access procedures, staff awareness and operational behaviour)

If you need to learn to how to conduct the tests, as opposed to subcontract the testing then please consider an ethical hacking course.

If you require more information such as estimated costs, time scales, reference material, or availability then please use the enquiry form or contact our customer services team.

Opinion

"Pen testing is a specialised discipline that encompasses a lot more than simply running a Vulnerability Assessment (VA) tool. Pen tests should follow formal procedures, use a multitude of scan tools and more importantly be undertaken by experienced engineers who can interpret the VA results to create stronger cascading attack scenarios. The test should also be undertaken by staff independent of any other function to ensure the tester provide objective and impartial reports. "

Features & Benefits

Features

Undertaken by engineers using CESG, CoCo and Crest guidelines to ensuring that the quality of test and the tester.
Staff that are solely dedicated to frontline testing and operational security support.
All Staff operate independent from any other dept; as such there is no conflict of interest and complete dedication.
10 years of experience and a mass of reference sites and customer endorsements

Benefits

Detailed report, with management summaries and priority rankings
Cost effective, whilst testing is a specialised subject it does need to be expensive.
One-to-one walkthrough and discussion to fully explain results.
Comprehensive testing options to cover every need.

Resources

CST Sample Report

CST Citrix Sample Report

Where is Your Achilles Heel?

Infrastructure Testing

Application Testing

RAS & VPN Testing

Social Engineering Testing

FAQ's

CST Corporate Brochure