February 2008: Penetration Testing Comes of Age

Hytec becomes one of the first security specialists to be instrumental in the creation of TigerScheme. TigerScheme is a new training and certification scheme for penetration testers, run by an independent management committee consisting of representatives from the Private and Public sector. Hytec is also a member of this management committee.

Much has been written about the importance of Information Assurance to the Transformational Government Agenda. For many years, the only recognized mark of compliance as a penetration tester was the CHECK Scheme, run by CESG (the UK National technical Authority of IA). However, the Scheme was intended for the UK Government national security community and, under EU regulations, could only be legitimately used by that community.

TigerScheme covers all aspects of penetration testing for the lower levels of assurance – something that has been especially welcomed by Local Government and Health Organisations, as well as the Information Security industry and many industry bodies.

Through the CSIA Claims tested (CCT Mark) Scheme run by the Cabinet Office, TigerScheme provides a means of independent certification of companies offering a penetration testing service, verifying that reliability checks on staff are performed, and effective procedures for quality assurance and complaints investigation are in place.

The scheme provides a training pathway for those wanting to get qualified in penetration testing – requirements for ISO27001, the Payment Card Industry Data Security Standard (PCI DSS) and for connection to Government Connect. The Scheme also requires passing practical and theoretic examinations to achieve the highest levels of certification.

Commenting on Hytec's involvement, Mark Brett, Programme Director of TigerScheme said: “We are delighted that Hytec has become one of the first companies to actively support TigerScheme. Their detailed knowledge of the security and assurance requirements of the public sector will be of immense benefit to our members and partners.”