Penetration Testing Done Right

Penetration Testing should be a key part of any business's assurance process, providing a level on independent testing that they are not wide open to hackers or other malicious actors; however, a penetration test is not a simple “off-the-shelf” test and needs careful design and planning.

By Paul Simmonds
ps@kuppingercole.com

October 24, 2019

Content of Figures

Figure 1 Survey - Which parts of your infrastructure do you test?
Figure 2 Survey - At what intervals to you perform testing?

1 Executive Summary

When done well, the results from a penetration test should provide evidence that your security investments to date were well spent and help guide your ...

2 Analysis

Why perform a penetration test?

Organisations perform penetration tests (pen-tests) for a multitude of reasons: “I inherited a budget with an annu ...

While the periods between penetration tests also varied greatly.

The starting point for a penetration test

Define your business risks; you need to ...

If you think you have a 100% locked down network, or securely segmented network, or a segmented VoIP network, then you will probably want to test that ...

3 Recommendations

If your organization is architected with firewalls, then, at a minimum, you should conduct a penetration test against all your Internet-facing systems ...

4 Links to Related Research

Leadership Brief: Responding to Cyber Incidents - 80209
Leadership Brief: Top Cyber Threats - 72574
Leadership Brief: How to get a Grip on OT ...