Internal Penetration Tests

They are conducted from within an organization, over their Local Area Network. Tests will observe whether it is possible to gain access to privileged company information, including sensitive Application Databases, HR information and ERP type resources. Internal tests will assess whether a user can escalate their network privileges and gain copies of usernames and passwords for other business users. Internal tests will also assess whether it is possible to remove data from the corporate environment without triggering alarms, or leaving an audit trail of what was taken, and where it was moved to. Internal tests will assess whether a user can circumvent existing security controls to grant themselves inbound access to the infrastructure through remote access and trojaning techniques

It is possible to deliver consistently strong documentation that will review all of your internally connected devices. Nettitude ensures that there is a high level management review document as well as an in-depth technical review document that is produced for all Internal Security Assessments. These documents will highlight security issues and mis-configurations, but most importantly, provide you with recommendations on how you can improve your internal security posture moving forwards.