Test
Penetration testing is carried out against the environment to identify potential weaknesses.
Industry
Fashion
Company size
Approximately 50 office-based employees
Environment
Microsoft applications, ERP system and cloud-based BI platform
Service
Penetration testing
The CHALLENGE
The business wanted to take a preventative approach to cyber security. There had been no major incident or compliance requirement driving the project. Instead, the internal IT team wanted to understand whether unknown vulnerabilities existed within the environment and address them before they created a larger problem. The company had completed penetration testing previously, but not as frequently as the IT team wanted, so the objective went beyond completing another one-off test — the business wanted a practical way to test its environment more regularly and use the findings to continually improve its security.
We wanted to know these vulnerabilities existed before they became a real problem, not after. Having them properly tested, rather than just reported on paper, gave us confidence we hadn't had before.
FR
The solution
Penetration testing is carried out against the environment to identify potential weaknesses.
The findings are assessed so the IT team can understand their severity and technical implications.
The business can prioritise the issues that require attention and use the report's recommendations to support remediation.
Once issues have been addressed, another test can be scheduled to assess the environment again.
The results
3
Vulnerability types identified
4
Step cycle now in place — test, review, remediate, retest
50
Employees across the tested environment
3
Core systems covered — Microsoft apps, ERP, BI platform
Ongoing IMpact
The most important outcome is that penetration testing is no longer being treated solely as an occasional exercise. The business is working through the findings and aims to resolve critical and high-priority issues before the next scheduled assessment. Once remediation is complete, another test can be carried out to verify the environment again.
Mon-Fri 8am-5pm · 24/7 for managed clients
Response within 1 business day, guaranteed
UK-based team, since 2012