Cloud Configuration Penetration Test

Address vulnerabilities within your Cloud services

This Cloud Configuration Penetration Test uses a mix of advanced manual testing techniques, configuration benchmarking and automated scans to perform an in-depth health check to identify risks within your business.

This penetration test will help mitigate the threat from both opportunistic and determined attackers. It involves:

• Identifying vulnerabilities and security misconfigurations in the definedyour Cloud infrastructure;
• Attempting to exploit any identified vulnerabilities;
• Creating an ordered list of issues and their associated risk; and
• Providing remediation advice for identified vulnerabilities.

  Download the full service description

Receive a comprehensive report

At the end of the test, you will receive a comprehensive report broken down into:

 Download the full service description

Methodology

This test follows IT Governance’s proprietary security testing methodology, which is closely aligned with the SANS and Open Source Security Testing Methodology Manual (OSSTMM) methodologies. It will assess the following key areas:

• Secure configurations
• Network traffic
• Patching
• Secure authentication
• Encryption
• Information leakage
• CIS benchmarking

Who is this service for?

This service is suitable for most organisations that use Cloud services and would like to ascertain any vulnerabilities within the tenancy and improve the hardening of services.