PHYSICAL PENETRATION TESTING

Approach

Our physical tests are conducted based on simulating an intrusion into your facilities. We methodically follow the following steps:

Evaluation — Our testing experts will engage in discovery activities, such as physical penetration test security needs and requirements, existing SLAs, risks potential vulnerability exposures and defining the scope. Other aspects succh complexity, tailoring possibilities and threat intelligence focus will also analyzed.

Reconnaissance — We will conduct physical security discovery activities, such as gathering intelligence about your company and attempt to identify your company's external and internal assets and physical controls through various methods.We will also review physical control systems (e.g., video surveillance, etc.), employee patterns and habits, and map weaknesses to their associated vulnerabilities.

Exploitation — During this phase we will perform the attacks and compromise your targets such as your employees and your building's IT rooms and employee areas. We will also attempt to access your IT environment by planting custom-built Vuntie backdoors and test xxfiltration to extract sensitive data belonging to your company, such as personal information, source code, internal methods/procedures, credit card numbers, etc., and thus demonstrate the impact of an actual attacks.

Verification — physical penetration testers perform a follow-up assessment to ensure that the exploitation phase’s remediation and mitigation steps have been accurately implemented. This also enables the testers to confirm that the customer’s security posture is aligned with industry best practices.

Delivery — Cleanup, document analysis, report creation and report presentation to stakeholders to easily benchmark security level of each process based on the results of penetration tests and implementation of countermeasures if requested by the customer.