Information Security Auditing
What is penetration testing!?
It is simulated cyber attacks from inside and outside your network.
It is like playing Chess.
It is us vs them.
It is defense vs offense...
It is a test of your security positions!
We'll break into anything, in the name of education.
We're here to educate you on how to tighten up your security position.
Questions:
Are you confident with your security posture but would like to spar with someone?
What's your defensive strategy? Why is it the best strategy for you?
Are you proactively challenging that strategy? How?
Would it benefit you to work with someone who could document and show you
your strengths, weaknesses, opportunities, and threats are from a "simulated attack"?
Getting started:
1.) Choose which level we work together at.
2.) Agree to what is in and out of scope.
3.) Provide legal coverage of services.
4.) Wait with anticipation. We'll come to you.
Testing options:
A.) Black (0%), White (25-75%) or Clear (100%) collaboration levels.
B.) Internal testing - Assume we're already in.
C.) External testing - You're under attack!
D.) Web application testing - Check for OWASP Top 10
E.) Physical testing - It's literally capture the flag.
F.) Social engineering - Phishing, Vishing, SMShing (texting)
PRO TIP:
"Cybersecurity" and "Ransomware" have rightfully been forced to the front of every business conversation. Businesses are moving to the cloud for it's agility, elasticity, flexibility, and security! They're refactoring operations to focus on business value adding activities that generate revenue and away from the on-premises infrastructure burden.
Access to "industry standard services" that are ready "out of the box". Allowing businesses of any size start from an idea and go to production with cloud services within hours as opposed to weeks or months. It's literally everything we need for Information Security under one umbrella or cloudwatch. That alone simplifies and saves by reducing your business footprint.
