More than an IT Health Check
mRr3b00t

Purpose

Our security assurance and testing services go way beyond a basic vulnerability scan. We work with you to understand your business context and the architecture of the service. We look at the threat landscape, your data flows, and assets to determine the best approach to assuring you have a strong security posture.

We test both from an external and from multiple internal positions to ensure you understand the current state position for risks both the service and its upstream and downstream interfaces.

Scope

We ensure the scope is reflective upon your risk landscape and threat profile. We tend to start with a wide view to ensure we do not miss something which later comes back to bite you.

External Testing

We conduct external perimeter testing focusing on areas such as:

Phishing
Mail Flow and Mail Services Security
Remote Access Services such as VPNs and Remote Working Solutions (e.g., RDP)
Web Applications and APIs
Firewalls and other supporting services

We do this using black, grey, and white box perspectives. We also strongly recommend using an assume breach mentality with regards to scoping and assessment.

Internal Testing

Our internal baseline testing includes:

Active Directory Auditing
Active Directory Exploitation Testing
Desktop Build Reviews
Server Build Reviews
Vulnerability Assessment
Asset Inventory
Mobile Device Audits
Firewall Reviews
Wireless Networking Reviews
Network Segmentation Testing
Lateral Movement Analysis

We do not believe in taking unnecessary risks, we therefore where possible attempt to assess a large breadth of an estate (we aim for ~90% coverage subject to requirements and conditions). In the cyber security world, it is the things you don’t know that tend to lead to incidents.

Outcomes

We work with your team to contextualise our findings to your business
Where appropriate we provide walk through exploitation demonstrations
We break down weaknesses (vulnerabilities) based on the number, type, and severity, we apply a consultant analysis and if appropriate a CVSS base score.
We outline the findings and provide remedial guidance.

Our output reports are one element, however the key to success with these activities is to ensure your team understand the vulnerabilities, how they arrived in the environment and understand how identity, protect, detect, and respond to these. The aim here is to try and avoid vulnerabilities being introduced or re-introduced to the environment. We support this with a high communications approach.