Chapters 1-19 of the series were all about building an #informationsecurity program with the most structure & rigor possible. This final installment is about trying to tear that program apart.
#penetrationtesting is the simple idea that you pay a #hacker (one of the good ones) to do everything within their power (and the signed statement of work) to break into your systems. That might include your wireless networks, software that you’ve designed in-house, and even your building using lock picking & #socialengineering tactics.
It’s not uncommon for an organization to want to start with this step, and it’s easy to see why. If you’re just starting your #cybersecurity journey, you want to know what your current posture is, right?
That’s an admirable thought, but a pen test is the last thing you want to pay for in this case. If you’ve given no thought to your security, a good and honest pen tester can probably just tell you how they’d break in (and save you thousands of dollars and a bunch of time).
If you’re in the early stages, get a #riskassessment, not a penetration test. A pen test will tell you how someone might break in; a risk assessment will tell you what to improve and how to improve it.
Check out the rest of the 20 for 2020 video series:
https://tetradefense.com/wp-content/uploads/2020/04/20-for-2020-18-1.png6751200Marlene Joneshttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngMarlene Jones2020-04-14 10:26:002020-06-24 14:16:0520 for 2020: "The Obligatory Car Video"
https://tetradefense.com/wp-content/uploads/2020/04/20-for-2020-18.png6751200Marlene Joneshttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngMarlene Jones2020-04-06 12:00:002020-06-24 14:17:3020 for 2020: "Mind Your Own Business"
https://tetradefense.com/wp-content/uploads/2020/04/20-for-2020-17.png6751200Marlene Joneshttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngMarlene Jones2020-04-03 11:47:002020-06-24 14:18:4820 for 2020: "Awareness Training is Number 17..."
https://tetradefense.com/wp-content/uploads/2020/04/20-for-2020-14.png6751200Marlene Joneshttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngMarlene Jones2020-03-18 10:45:002020-06-24 14:20:0520 for 2020: "Wait, Didn't He Talk About This Already?"
https://tetradefense.com/wp-content/uploads/2020/04/20-for-2020-13.png6751200Marlene Joneshttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngMarlene Jones2020-03-16 10:16:002020-06-24 14:20:2020 for 2020: "Live From New York, it's 20 for 2020!"
https://tetradefense.com/wp-content/uploads/2020/04/11C.png6751200Marlene Joneshttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngMarlene Jones2020-03-03 16:23:002020-06-24 14:21:2720 for 2020: "The Never Ending Struggle"
https://tetradefense.com/wp-content/uploads/2020/04/Chap-10.png6751200Marlene Joneshttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngMarlene Jones2020-02-17 17:17:002020-06-24 14:21:5920 for 2020: "Two is Better Than One"
https://tetradefense.com/wp-content/uploads/2020/01/4.png6751200Lauren Reidhttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngLauren Reid2020-01-30 08:54:292020-06-24 14:23:5220 for 2020: "No one will draw the lines in the sand for you"
https://tetradefense.com/wp-content/uploads/2020/01/2-1.png6751200Lauren Reidhttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngLauren Reid2020-01-20 15:37:282020-06-24 14:24:3520 for 2020: "Know What You Have" (Software Edition)
https://tetradefense.com/wp-content/uploads/2020/01/1.png6751200Lauren Reidhttp://www.tetradefense.com/wp-content/uploads/2022/02/Tetra-Defense-Logo_Landscape-White-Blue-300.pngLauren Reid2020-01-16 15:45:072020-06-24 14:24:4920 for 2020: "Know What You Have" (Hardware Management Edition)