Fashion · Penetration testing
Making penetration testing part of an ongoing security strategy
A fashion company wanted greater confidence that vulnerabilities across its IT environment were being identified before they could become more serious security issues.
At a glance
Fashion retailer
- Industry: Fashion
- Organisation size: About 50 office staff
- Service: Penetration testing
- Environment: Microsoft apps, ERP and a cloud BI platform
The challenge
Identifying vulnerabilities before they become security incidents
The business wanted to take a preventative approach to cyber security. There had been no major incident or compliance requirement driving the project. Instead, the internal IT team wanted to understand whether unknown vulnerabilities existed within the environment and address them before they created a larger problem. The company had completed penetration testing previously, but not as frequently as the IT team wanted, so the objective went beyond completing another one-off test — the business wanted a practical way to test its environment more regularly and use the findings to continually improve its security.
We wanted to know these vulnerabilities existed before they became a real problem, not after. Having them properly tested, rather than just reported on paper, gave us confidence we hadn't had before.
Fashion retailer
The solution
Making penetration testing a regular cycle
Test
Penetration testing is carried out against the environment to identify potential weaknesses.
Review
The findings are assessed so the IT team can understand their severity and technical implications.
Remediate
The business can prioritise the issues that require attention and use the report's recommendations to support remediation.
Retest
Once issues have been addressed, another test can be scheduled to assess the environment again.
The results
Actionable vulnerabilities identified
3
Vulnerability types identified
4
Step testing cycle now in place
Ongoing impact
From occasional testing to continuous improvement
The most important outcome is that penetration testing is no longer being treated solely as an occasional exercise. The business is working through the findings and aims to resolve critical and high-priority issues before the next scheduled assessment. Once remediation is complete, another test can be carried out to verify the environment again.
Want greater visibility of vulnerabilities in your environment?
0333 370 7000
Mon-Fri 8am-5pm
[email protected]
Response within 1 business day, guaranteed
United Kingdom
UK-based team, since 2012