One of the most effective methods to properly identify the security level of a company is to conduct a penetration test (PenTest) at various entry points into the company network.KIS works internally with our consultants and externally with specialized business partners to conduct penetration tests.
Internal PenTests include running a number of tests with software designed to identify vulnerabilities and check the Anti-Virus and local system security level of servers and client systems. A Review of security policies, procedures, usage policies, and configuration / administration documentation is usually reviewed along with the PenTest. Once complete, KIS will deliver a report that details the security level and the risk factors that must be reviewed by the client to mitigate the risks that remain. PenTests do not include performing the mitigation or any service other than identifying the vulnerabilities, threats, and risks.
Manufacturers used by KIS to create solutions in this Practice Area:
- Cisco
- Microsoft
- Secure Computing
- Security Scanners (multiple vendors)
Features:
- Security vulnerabilities identified
- Awareness of security shortfalls for corrective action
- Security Posture report for record
- Mitigation tasks to increase protection and reduce vulnerabilities
- Compliance with Security Laws and regulations
- Auditing task for many industries
- CISSP level consulting and guidance
- Business will be aware and advised on best practices
- Vulnerabilities will be identified for record with mitigation tasks
- Follow-up tests will increase the security posture until an optimal posture is achieved
- CISSP level effort is acceptable for Compliance with most industry and government standards
Consultants/Principal Experts: Sean Canevaro, Allan Hurst, Craig Miller
Facebook
Twitter
RSS
