The techniques listed below gauge the education of security awareness of the staff and the vulnerabilities from the lack of security education. These techniques may include pretext phone calls and site visits— such as posing as vendors, employees, IT support personnel, clients, etc.
icon-1
Reconnaissance
Our Security Team will gather evidence and information on the target of the attack, using both active and passive techniques, in attempt to find material being made available that could lead to a security threat. During this phase an attempt is made to determine how much information is available on the Client’s organization.
icon-4
Vulnerability Mapping & Penetration
The Security Team will look for vulnerabilities in enumerated computers and devices and attempt to exploit them. If successfully penetrated, the team will attempt to escalate privileges and gain further access into the network, including the points at which sensitive data can be accessed.
The intent of this exercise is to show our client(s) just how sensitive their systems are to attack.
icon-2
Scanning & Enumeration
Following the Reconnaissance stage, the Security Team will run a variety of information gathering tools in order to enumerate computers and devices that the team may be able to access.
icon-3
Final Penetration Test Report
Throughout the Penetration Test, our Security Team will document and record every step in our exercise. We will provide a report of the Penetration Test which will include all vulnerabilities discovered, what data was obtained from the network, and the actions that need to be taken to ensure security issues are resolved. Our report will be strictly confidential.
icon
Social Engineering & Phishing
Witan Solution may attempt to use minimally disruptive social engineering techniques, including sending phishing emails designed to target and trick unsuspecting employees to reveal private company information.
Social engineering is the art of manipulating people into performing actions or divulging sensitive information. Rather than breaking into computer networks or systems, social engineers use psychological tricks on humans. The attacker often poses as a trusted authority, and may use different methods like phone, email with unknown links, websites or a combination of these.
icon-1
Internal Network Security
Internal network security is only part of the picture, and securing internal and external networks is a first step. For complete protection, web applications and internal applications need to be secure. Externally accessible applications such as web sites, represent a large threat. Application development typically includes functional and performance testing, but rarely security testing. For that reason, applications should be tested by security experts.
Advanced Ethical Hacking
By mimicking an actual ‘hacker attack’, the Witan Solution Security Team will break into your network and show how an attack would be perpetrated before a malicious attacker can perpetuate the same attack. The goal of an “ethical hacking” security exercise is not to just reveal deficiencies in the performance of your IT team, but rather to support your team, and provide a road-map for making your networks much more secure, identify the sensitive information which the organization maintains, and improve the best reasonable security measures for that organization.
Much like a CFO who needs a CPA firm to audit their financials, an independent “ethical hacking assessment” can provide valuable insight and guidance on maintaining a better data and network security posture.
Cyber Awareness Training
The goal of Cyber Awareness training is to ensure that employees at all levels are aware of how to identify, control, and mitigate loss of confidential data in a secure technical environment that meets acceptable security standards. Protecting an organization from cyber-threats, such as malicious hackers, requires everyone’s participation. The weakest link in many organizations is an untrained employee who does not understand the value of the information that they control. They are often susceptible to social engineering and other human-based attacks. This course will train you how to best protect yourself and your organization.
Incident Response to Cyber Incidents or Data Breaches
Cyber incidents can be damaging to an organization, both in the short and long term. Properly responding to an event is critical to ensuring damages are minimized and not allowed to spread, that intrusions are eradicated, threat actors are identified and potentially prosecuted, and that potential negative publicity is controlled as operations quickly return to a normal state.
Witan Solution goal is to identify the level of sophistication of the attack and determine, as best as we can, the likelihood that data was targeted or accessed. We typically provide technical consultation relating to a possible data breach due to a Phishing attack, Ransomware attack, Business Email Compromise, and other malicious attacks.
Witan Solution Group is focused on assisting our clients in an efficient and cost-effective manner.
There are no surprises. We develop long-term relationships with our clients, approaching each engagement with a focus on bringing value.
We believe that Cyber Security is NOT an IT issue, but a business risk issue!
Witan Solution Group is focused on assisting our clients in an efficient and cost-effective manner.
There are no surprises. We develop long-term relationships with our clients, approaching each engagement with a focus on bringing value.
Frequently Asked Questions
Is ethical hacking legal?
Why is ethical hacking important?
How does penetration testing differ from ethical hacking?
What can an ethical hacker do?
Would small businesses hire a Cyber Security consulting services?
Add comment