IT Audit and Compliance Services for Financial Institutions

Network Penetration Testing

Identify security vulnerablilites prior to costly damage being inflicted by security incidents.

Network Penetration Testing from Compass IT Compliance is a simulation of a real-world outside attack against a system in order to identify network security weaknesses before they are exploited by hackers. Compass' Penetration Testing services will:

• Attempt to gain control of the host system, 
  using various software tools and techniques.

• Document the steps taken, showing if any 
  attack was successful.

• If successful, pivot on that system and attempt 
  to discover and attack other host systems on 
  the customer network.

• Attempt to gain control of any system in the 
  DMZ (if applicable) and/or the production 
  network. If the Internet Perimeter was 
  successfully breached, document the steps 
  taken.

• Provide guidance on how to remediate any/all 
  issues identified.