Penetration Testing (Ethical Hacking or Pen Test) is the process where we apply the tools and methods of a hacker to your business to find vulnerabilities. With the vulnerabilities identified your IT/Dev Team can resolve the vulnerabilities so that a cyber attacker is unable to use those vulnerabilities to gain access to and impact your business. This is why an office network penetration test is so important!
An Office Network Penetration Test is where we connect our computers to your office network and then attempt to penetration test everything connected to the office network. There is an assumption that cyber attackers can’t gain access to office networks but it has been proven through past cyber attacks (like Target) that it is pretty easy to gain physical access to network ports or even compromise with malware a device connected on the network and then access the network through that compromised device. It is so easy for a cyber attacker to gain access to the office network that we rate the risk level for a cyber attack from the internet just as high as a cyber attack from the office network.
Some of the types of vulnerabilities we have found include:
- full access to databases
- full access to network equipment
- access to sensitive files like identification documents
- full access to servers
- full access to computers
If an Office Network contains servers then we would strongly recommend that an Office Network Penetration Test is performed. If the Office Network only contains work computers and no servers, we still recommend an Office Network Penetration Test. However, if you can setup Network/Wireless Isolation so that the computers can’t talk to each other on the Office Network, this can significantly reduce your risk. That said, the purpose of a Penetration Test is to test the implemented cyber security. Therefore it is always recommended to perform a Penetration Test to test the implemented cyber security, as you don’t know if you are actually protected or safe without being tested. I.e. “inspect what you expect”.
Vertex Cyber Security provides Office Network Penetration Testing for many organisations, so if you have questions or are ready for a Penetration Test contact Vertex.
