IT Security Health Check (ITHC) Testing

What is an IT Health Check / Penetration Test?

It is a method of evaluating the security of a computer system, web site, software application or network by simulating an attack from a malicious source, known as a Black Hat Hacker, Hacker or Cracker. It could even be a member of your own staff.

The process involves an active analysis of the specified target(s) for any potential vulnerabilities. Such Vulnerabilites can result from poor or improper system configuration or programming.

This analysis is carried out by a certfied and trusted IT Secuirty Consultant, also known as a penetration tester, who adopts the same position as a potential attacker. It can involve active exploitation of security vulnerabilities. Any security issues that are found will be presented to the system owner, together with an assessment of their impact, and with a proposal for mitigation or a technical solution.

The intent of a penetration test is to determine the feasibility of an attack and the amount of business impact of a successful exploit.
(Source Wickipedia - http://en.wikipedia.org/wiki/Penetration_test )

Network Testing

Encription Limited can carry out both external and internal IT Health Checks (ITHCs) / Penetration tests on your IT network.

We test the security of the firewalls and all servers including email servers. We will make sure that the servers are patched up to date and that the network is obfuscated (important information cannot be seen).

Access to the system, including dual factor control if in use, will be examined. If wireless technology or mobile devices (PDA's / Laptops) are in use we can test them. No damaging exploitation of vulnerabilities will take place without your permission.

We can work in both Black Box (we are given no information apart from the target) and Grey/White box (we are given specific information to make the testing more focused).

By limiting the number of people who know the testing is taking place you can also test how good your IT incident response is.

Encription is GCHQ CESG CHECK Approved

We also carry out GCSx CoCo and PCI DSS testing