Penetration Testing

Penetration Testing for security audit.
1.    Security Posture Assessment Objectives
-    To identify the vulnerabilities of web application and network.
-    To provide a report on the security posture assessment findings with recommendations on the best security practices to eliminate or mitigate the discovered vulnerabilities
2.    SPA
•    The proposed SPA services should be a comprehensive process that looks for, quantifies and rank any known security weakness in a target system.

This process is performed by security analysts on-site, relying upon the presence of representations and the advice given by user in connection with the provision of the services
•    The proposed SPA services should be designed to assist in addressing the current problem and able to guide user in implementing measures to protect and manage information security.

3.    Pre assessment
Gather information on the followings:
- Technical details on the sites
- Allowable assessment and penetration testing hours
- Other policies, rules and regulations to adhere to
4.    Assessment
The assessment should be concluded with acomprehensive report and presentation to the user on analysis of the findings and recommendations based on best security practices in resolving or mitigating the discovered security weakness

-    Network and Server Security Assessment
•    2 unit Servers
•    1 unit firewall
•    1 unit Core switch

-    Web Application Security Assessment
•    Portal
•    User DC (Data Catalogue)
5.    Post assessment
-    Analyse findings of assessment and penetration testing
•    Comprehensive analysis of the discovered vulnerabilities

-    Analyse network architecture for vulnerabilities and provide recommendations on area of improvement for
•    Web application
•    Server
•    Network device
•    Network architecture
-    Report and Presentation on finalised findings and analysis