Cyber Audit
At PureCyber we firmly believe that cyber security is a process, not a product.
Understanding the threats is key to defending against them. The key is to identify what data is being held, how the data is used and what current controls are in place around it. That is why we recommend to any business wanting to truly understand the threat, to undertake a Cyber Audit.
What does a Cyber Audit involve?
External Penetration Test: This external test is performed to identify vulnerabilities within a website, system or application.
Internal Vulnerability Scan: Conducting an authorised internal scan across a network to understand any misconfigurations that might lead to vulnerabilities.
Phishing Simulations: With 83% of UK businesses reporting phishing attacks in the last year, testing the integrity of internal users is more important than ever. Bespoke phishing campaigns are created to fully test and train users to spot malicious emails.
Dark Web Scanning: These scans identify any historic details from previous breaches that could be used by criminal against your organisation.
Governance: A review of internal policies and procedures.
What is the outcome?
Once all of the sections have been completed, customers receive an understandable report that details everything they are doing well, what they could improve and what they could implement to improve their cyber security posture. As part of this, organisations will also receive a roadmap of what steps they can take to improve their cyber security over the next 12-18 months; providing achievable milestones that are bespoke to their organisation.
When it comes to cyber security, preparation is key; not having the proper controls in place before a cyber attack happens can have devastating effects on any organisation. It’s not a matter of if but when a cyber attack will happen.