External network penetration tests

What is an external network penetration test?

A network penetration test aims to assess your network for vulnerabilities and security issues in servers, hosts, devices and network services. This generally includes:

• Identifying and assessing all Internet-facing assets a criminal hacker could use as potential entry points into your network;
• Assessing the effectiveness of your firewalls and other intrusion-prevention systems; and
• Establishing whether an unauthorised user with the same level of access as your customers and suppliers can gain access to your systems via the external network.

Clients will receive information about the identified vulnerabilities in a format that allows them to assess their relative business risk and the cost of remediation. This information can be used to resolve the vulnerabilities in line with the network owner’s budget and risk appetite.

To find out more about our penetration testing services, get in touch with one of our experts today.

Speak to an expert

---

---

Is an external network penetration test right for you?

If you are responsible for your external network, you should ask yourself:

• Are my systems fully patched and properly configured?
• Are any systems or applications secured with weak or default passwords?
• Have I accounted for all the services exposed to the Internet?
• Could malware be present on my system?
• Is every device secured by a correctly configured firewall?
• Is my confidential information properly segregated or secured?

---

The benefits of completing an external network penetration test

Our penetration tests will help you:

• Gain real-world insight into your vulnerabilities;
• Identify any patches that need to be installed;
• Reconfigure software, firewalls and operating systems;
• Identify needs for encryption or more secure protocols;
• Find the most vulnerable route through which an attack can be made; and
• Find loopholes that an attacker could use to steal sensitive data.

---

Our engagement process

Our CREST-accredited penetration testers follow an established methodology based primarily upon the Open Source Security Testing Methodology Manual (OSSTMM). This approach emulates attackers’ techniques using many of the same readily available tools.

1. Scoping: Prior to a test, our account management team will discuss the requirements for your network/infrastructure assessment to define the scope of the test.
2. Reconnaissance: IT Governance will enumerate your network assets and identify any holes in your systems where malicious actors could break in.
3. Assessment: Using the information identified in the reconnaissance phase, we test the identified hosts for potential vulnerabilities. 
4. Reporting: The results will be fully analysed by an IT Governance certified tester and a full report will be prepared that sets out the scope of the test and the methodology used along with the risks identified. This will provide your organisation with the ability to produce an accurate threat and risk assessment.
5. Re-test: We can provide access to our testers and the raw test data to support and expedite remediation. We can also retest your systems so that you can be sure all the issues have been successfully resolved.

---

Select your external network penetration test

We offer two levels of penetration test to meet your budget and technical requirements. 

---

How IT Governance can help you 

---

Companies using our penetration testing services

---

Speak to an expert

For more information and guidance on penetration testing or packages that IT Governance offers, please contact our experts who will be able to discuss your needs further.