Penetration Testing
Security assessments pinpoint vulnerabilities and demonstrate threats so organizations can understand and manage their risks. Many regulations require/recommend some form of vulnerability and penetration testing. For example:
"Regularly test the key controls, systems and procedures of the information security program. The frequency and nature of such tests should be determined by your risk assessment. Tests should be conducted or reviewed by independent third parties or staff independent of those that develop or maintain the security programs." - GLBA
"Evaluation - Perform a periodic technical and non-technical evaluation... that establishes the extent to which an entity's security policies and procedures meet the requirements of this sub-part." - HIPAA
Designed For:
- Organizations of any size and from any industry who want to pinpoint their vulnerabilities so they can prioritize and provide resources to managing security risks.
- Organizations that need a third party’s review and evaluation of their security measures, including penetration testing, in order to remain compliant.
What We Typically Provide:
- Footprinting: Gather information about an organization to identify targets, boundaries and public information.
- Fingerprinting: Use this information to detect and scan deeper in the organization in order to identify likely vulnerabilities.
- Attack: Exploit all found vulnerabilities using technical and non-technical social engineering and by escalating privileges.
- Information Gathering: Demonstrate our access to sensitive non-public information.
How You Benefit:
- Know Your Risks: You will know where you have risks and will be able to prioritize your security and controls initiatives to address matters of greatest priority.
- Demonstrate Your Controls: You will know that your security controls are implemented correctly, operating as intended and producing the desired outcome.
- Comply with Regulators: Our Assessments are designed to meet the regulatory requirements to test and evaluate key controls.
| More Detailed Information (PDF opens in a new window) | Contact us today – Satisfaction is 100% guaranteed. |
Recent Quote
“TrustCC's professionalism, knowledge, and effective communication style are a welcome change compared to other firms. Their recommendations allowed us to easily implement the necessary control changes to not only pass examination, but ensure the proper protection of both the Bank’s and our Customer’s information." – Eric Jensen Chief Financial Officer of Fortune Bank; December 2007
About TrustCC
TrustCC’s team of professionals is unsurpassed in hands-on experience and regulatory knowledge. We focus our attention on detail, insightful reporting, and our customers’ needs.
TrustCC is known for its systems, security, and regulatory expertise, customer service and independence.
We are confident that our services will exceed your expectations.
Locations Served
TrustCC started in the Seattle/Tacoma area. Today TrustCC serves clients throughout the United States and elsewhere!