Blog Archives

Conducting a comprehensive cyber security penetration test assessment for a commercial business involves asking a wide range of questions to ensure that all potential vulnerabilities and weaknesses are identified and addressed. Here are some key questions to ask when conducting a penetration test assessment for a commercial business:

1. What are the critical assets defined by the business.
2. What are the potential attack vectors that a malicious actor could use to gain access to these critical assets?
3. What are the current security controls in place, and have they been validated?
4. Are there any vulnerabilities in the system that have already been identified by your own internal vulnerability assessment?
5. How are employee accounts and privileges managed. 
6. How are software and hardware updates managed. 
7. What unique protocols, ports or services exist.
8. How are backups managed, and are they regularly tested and validated?
9. Are there any third-party vendors or partners with access to the system, and how are they managed from a security perspective?
10. What are the key business functions that could be impacted by a successful cyber attack, and what is the potential impact to the business in terms of financial, reputational, or legal risks?

By asking these and other related questions, a cyber security professional can gain a comprehensive understanding of the organization's current security posture and identify areas that need to be improved.

If you would like to measure your security we invite you to learn more about CATSCAN