Safely identify any weaknesses in your systems
A penetration test is an attempt to safely exploit your IT systems to determine whether they’re vulnerable to attack. They are most effective when both external and internal tests are carried out
Who is penetration testing for?
- Any school, college, academy or MAT that wants to ensure its critical assets and data are secure
- Any school, college, academy or MAT that wants to demonstrate to stakeholders that it takes security seriously
- Any school, college, academy or MAT that wants to enhance its Cyber Essentials Plus certification
Why pentest your systems?
- You're responsible for protecting the sensitive data of vulnerable young people. It’s vital that appropriate measures are in place to protect it
- You're providing a critical service in teaching, guiding and safeguarding our young people. If for any reason you're unable to operate due to a cyber attack, the negative impact could be significant
- Disruption to systems and networks can be expensive to fix (and potentially result in fines), stop you from being able to operate, compromise safeguarding and be damaging to your reputation
- Penetration testing helps you identify vulnerabilities, so you can protect your environment from malicious attacks. It enables you to mitigate critical threats, which reduces the likelihood of a breach, which could result in leaked data or disrupted operations
- Identifying vulnerabilities can provide evidence of testing systems to demonstrate to external parties and governing bodies that you take security seriously
How does it work?
- We start with a scoping call, identifying the boundaries we’re working within. We’ll agree on the requirements and outcomes of the testing, before moving on to testing your systems.
- Our penetration testers follow a proven methodology with a series of simulated tests to identify any weaknesses in your defences – whether internally or externally.
- We adhere to an agreed set of rules of engagement before, during and after every penetration test.
- We will provide a comprehensive combined technical and summary report, detailing our findings and any remediation points, and will go through these at the planned debrief within five days of pentest completion.
What happens during a penetration test?
- Our penetration testers follow a proven methodology with a series simulated tests to identify any weaknesses in your defences - whether internally or externally.
- Often it is the combination of a series of weaknesses in your systems that allows attacks, rather than a single vulnerability. That's why our tests combine a series of lower-risk exploits in a particular sequence, to determine whether they would have any effect.
- We test against our standard Open Web Application Security Project (OWASP) top 10 standards and Penetration Testing Executive Standard. We detail the penetration test findings in a report that highlights the potential risks and recommends where additional resources should be applied to protect your systems.
How often should we pentest?
- Penetration testing should be performed on a regular basis. This ensures that you can detect and respond to any newly discovered threats or emerging vulnerabilities that could lead to a system compromise by attackers.
Furthermore, penetration tests should also be carried out whenever:
- Significant changes to your infrastructure have taken place
- Additional locations or branch offices are opened
- You suspect or have fallen victim to an attack
Pricing
This is a service tailored to your individual needs and circumstances, so please send get in touch or send a message below for an introductory, non-obligation chat...