CREST Penetration Testing ■

Penetration testing is a method of assessing the security of a system, network or an entire organisation by emulating a real attack scenario. The ultimate goal of penetration testing is to help identify specific risks which, when addressed, will positively impact on your overall security.

The process involves an active evaluation of the system to discover the weaknesses affecting it. As part of the penetration testing process, our security consultants will not only identify weaknesses, but also exploit them in a safe and controlled manner in order to determine the real risk to the business.

CREST - The Council for Registered Ethical Security Testers is an organization to serve the needs of a global information security marketplace that increasingly requires the services of a regulated and professional security testing capability. CREST provides an assured and validated path to the procurement of security testing.

Why work with a CREST certified company?

	Safe and effective security processes: CREST requires member companies' processes and procedures for handling client data to guarantee the confidentiality of the information at all times during and after the CREST security engagement.
	Technical ability: A CREST penetration test is conducted by a highly experienced security consultant who has undergone and passed the CREST certification assessment, ensuring the necessary skills and technical expertise to obtain the highest quality results in the security assessment.
	Professional indemnity: Penetration testing can carry a slight risk. A good testing company will make every effort to minimise this risk, however in the event of and incident, a CREST certified company will provide the necessary professional indemnity in order to protect the clients interests.
	Strong code of ethics: CREST security testing teams are bound to a strong code of ethics and will always operate in the best interest of their clients.
	Escalation channel: In case of dispute, CREST can act as an independent third party liaising between customer and testing company. This offers an extra level of protection to the procuring business.

For more information about CREST penetration tests, please contact us and we would be happy to discuss this with you in the context of your business.