The effectiveness of your security solution is critical to your business. Regular External Security Audits will help maintain the integrity of your systems. Testing your systems will ensure that maintenance and routine usage have not disrupted performance and that any changes in configuration have had no negative effects. An External Audit has the following objectives:
- To identify what information is publicly available regarding your organisation and infrastructure.
- To determine the extent of any weaknesses in your infrastructure, hosts, operating system installations and applications which would be available to any external party who wishes to compromise the availability, integrity and confidentiality of your networks and applications.
- Provide guidance to your technical staff in securing any identified weaknesses against potential exploitation.
Presence will use various techniques to perform the security audit. These fall into two main categories:
Passive Information Gathering
Certain details about your network are public information. Presence will use public databases and social engineering to discover what information is available and whether or not an unauthorised party attempting access to your network could use this information.
Vulnerability scanning and penetration testing
Presence will employ a variety of techniques to check which systems are available, what information can be gathered from these and which vulnerabilities might be present. This part of the audit contains manual and automated techniques, which cover penetration testing and vulnerability scanning.
We will provide you with a full project plan, which both parties will approve and at the end of the project Presence will complete a comprehensive report to be delivered back to the client over a debriefing meeting. |
|