Penetration Testing

Is your organisation’s IT infrastructure secure enough to cope with information security breaches and malicious attacks? Let Hytec test it for you!

Overview

Penetration Testing is conducted by an affiliate company (CESG-accredited) whose technical consultants provide your organisation with an up-to-date, active audit of the security of your IT infrastructure, allowing you to see where there are risks to the safety of your organisation’s information and allocating resources effectively to counteract these threats.

Why should you conduct penetration testing?

Regular penetration testing can help protect your organisation by:

• Preventing financial loss through fraud (hackers, extortionists and disgruntled employees) or lost revenue due to unreliable business systems and processes.
• Proving compliance to compliance bodies (such as DoH and CfH), customers and shareholders. Non-compliance can result in your organisation losing business, receiving heavy fines, gathering bad PR or ultimately failing. At a personal level it can also mean the loss of jobs, prosecution.
• Protecting your brand by avoiding loss of confidence and reputation.
• Helping to shape information security policies by identifying vulnerabilities and quantifying their impact and likelihood so that they can be managed proactively, for example, to help with the creation of an Information Security Management Strategy (ISMS).

What should be tested?

If your organisation has conducted a risk assessment of the IT infrastructure, this will have highlighted the main areas that could be under threat. A penetration test of your infrastructure will identify any vulnerabilities associated with these risks.

What do I get for my money?

A great deal of effort from technical consultants goes into the actual testing of the various different areas of your infrastructure, however, the real value is derived from the in-depth analysis and report provided to your team at the end. Ideally the report and debriefing should be broken into sections that are specifically targeted at their intended audience.

Executives need the business risks and possible solutions in a very ‘top-down’ manner, managers need a broad overview of the situation without getting lost in detail, and technical personnel need a list of vulnerabilities to address, with detailed recommended solution.

Our team of Technical Architects has a vast and current knowledge of developing and implementing IT infrastructures that support the aim of good information security. For NHS organisations, we follow and practice the Gartner-based NHS Infrastructure Maturity Model (NIMM) to help your Trust progress its infrastructure.

If you would like more information on any of the above services click here or call our helpful sales team on 0208 973 1100