Pen Test
Intrusion tests are carried out from inside or outside the audited information system to discover vulnerabilities and examine the impacts they have and the action that can be taken. The auditor thus plays the role of potential attacker in real conditions. The Pen Test completes and improves the effectiveness of other audit tasks, or demonstrates the feasibility of using the flaws and vulnerabilities discovered for awareness-raising purposes.
Organizational & Physical Audit
The audit concerns the security documentation and guarantees:
◦ Compliance with the security requirements and the standards in force
◦ Adaptation to the technical measures implemented
◦ Practical application and effective maintenance
The physical security audit will focus on the safety of buildings, IT rooms or offices: access controls, intrusion, CCTV, etc.
Social Engineering/Phishing
Exploitation of human vulnerabilities or those associated with the entity’s organization to access confidential information or certain assets. Social engineering tests create a real situation to help identify the awareness-raising actions to be implemented as a priority, together with the populations to be targeted, or to verify the effectiveness of a campaign.
Architecture Audit
Verification that security practices related to the choice, the positioning and the implementation of hardware and software deployed in an information system comply with the state of the art and the in-house requirements and rules of the audited party. The audit may be extended to interconnections with third-party networks.
Configuration Audit
Verification of the implementation of security practices that comply with the state of the art and the in-house requirements and rules of the audited party on the configuration of the hardware and software deployed in an information system.
Red Team
Red Team intrusion tests assess a business’s critical assets by testing out its different means of protection, be they physical, human, organizational or IT. This test is carried out in different stages over several weeks, to meet the objectives set by the Management.
Industrial systems audit
Assessment of an industrial system’s level of security and the associated control mechanisms: architecture audit, an audit of the configuration of the elements that make up the architecture and organizational and physical audit.
Audit of Source Codes
Analysis of all or part of the source code or the conditions for compilation of an application to discover its vulnerabilities, arising from programming or logic errors, which may have an impact on security.