Security

Ask something
Discussion Locked

Internal Penetration Testing Team

0 helpful
2 replies

by wrangler80

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Are there any benefits of creating an internal penetration testing team to regularly check the vulnerabilities of a company's network? What are its downsides?

2 replies

by ken selfridge

Sounds like you're asking a couple of things...

(1) would it be a good thing to perform regular penetration tests on your network? Yes, especially if you have connectivity/visibility on the Internet.

(2) would it be good to have internal staffperform this testing? You can, if you have the tools and training necessary. Alternatively, I would recommend contracting an outside agency to perform the tests and provide you with an evaluation.

Additionally, if you don't have a CIRT (Computer Incident Response Team) onsite, you probably want to create one ASAP. If Something Goes Wrong, you need a plan on how Things That Go Wrong are addressed.

Ken

This discussion is closed to new replies.