Contact Us

Contact Us

Please get in touch using the form below

1000 characters left
I prefer to be contacted by:
View our privacy policy
Book a penetration test today. Get in touch.

Overview

Identify and address vulnerabilities in line with ISO 27001 requirements

Penetration testing is a crucial to achieving and maintaining a robust Information Security Management System (ISMS) that is compliant with ISO/IEC 27001. Objective A.12.6.1 of ISO 27001 states that information about technical security vulnerabilities should be obtained in a timely fashion and appropriate measures taken to address the associated risks.

ISO 27001 penetration testing from Redscan helps to satisfy the latest ISO requirements by providing the support and advice needed to develop and assess an ISMS and providing the support and advice need to ensure its continual improvement.

A range of security assessment services

ISO 27001 pen testing

What is an ISO 27001 penetration test?

A penetration test is a type of security assessment designed to identify, exploit and help address cyber security vulnerabilities. ISO 27001 penetration tests are custom engagements tailored to meet requirements at any stage of an ISMS project, including the risk assessment, risk treatment and continual improvement stages.

Redscan’s CREST-approved penetration testing services are conducted by experienced security professionals that possess the technical expertise to identify and address vulnerabilities across systems, networks and applications. As part of all ISO pen testing engagements, our team will produce a written report that is tailored to ISO requirements and can be used to demonstrate compliance.

Get a pen test quote

Contact us

Types

Types of ISO 27001 penetration testing

Whatever stage of the ISO 27001 ISMS project a penetration test is conducted, engagements can be aligned to the requirements that organisations deem most relevant to their risk landscape. Tests could include:

Types of penetration test

Network infrastructure testing

Network infrastructure testing

Redscan rigorously investigates your network to identify and exploit a wide range of security vulnerabilities. This enables us to establish if assets such as data can be compromised, classify the risks posed to your overall cyber security, prioritise vulnerabilities to be addressed, and recommend actions to mitigate risks identified.

Wireless testing

Wireless testing

Unsecured wireless networks can enable attackers to enter your network and steal valuable data. Wireless penetration testing identifies vulnerabilities, quantifies the damage these could cause and determines how they should be remediated.

Application and API security review

Application and API security review

Vulnerabilities contained within software are commonly exploited by cybercriminals and are easily introduced by under-pressure programmers. Redscan’s ethical hackers conduct automated and manual penetration tests to assess backend application logic and software and API source code.

Remote working assessment

Remote working assessment

If your organisation is embracing mass remote working for the first time, it’s important to ensure that it is doing so securely. Ensure your networks, applications and devices are protected and fully secured with a custom remote working security assessment.

Web application security testing

Web application security testing

Web applications play a vital role in business success and are an attractive target for cybercriminals. Redscan’s ethical hacking services include website and web app penetration testing to identify vulnerabilities including SQL injection and cross-site scripting problems plus flaws in application logic and session management flows.

Social engineering

Social engineering

People continue to be one of the weakest links in an organisation’s cyber security. Redscan’s social engineering pen test service includes a range of email phishing engagements designed to assess the ability of your systems and personnel to detect and respond to a simulated attack exercise.

Mobile security testing

Mobile security testing

Mobile app usage is on the rise, with more and more companies enabling customers to conveniently access their services via tablets and smartphones. Redscan carries out in-depth mobile application assessments based on the latest development frameworks and security testing tools.

Firewall configuration review

Firewall configuration review

Firewall rule sets can quickly become outdated. Redscan’s penetration testers can detect unsafe configurations and recommend changes to optimise security and throughput.

Meet some of our team

“When choosing a pen test provider, you need to be confident they will deliver what they promise. At Redscan, as a CREST-accredited company, we always maintain the highest technical, legal and ethical standards. Transparency and integrity are key to everything we do.”
Jed
Head of pentesting
“Our remit is to think creatively to find solutions that will help keep your organisation more secure. We’re continually improving our knowledge of how adversaries think so that we can better identify security weaknesses and enhance detection of new and emerging threats.”
Faisal
Security Consultant
“We’re focused on delivering the best pen testing security outcomes for our clients. That’s why we’ll work with your organisation every step of the way – from initial scoping of requirements through to remediating vulnerabilities. Communication is a vital part of our approach and we’ll work hard to help you achieve the results you need.”
Nima
Security Consultant
“We aim to make sure that your organisation gets the best possible value from a pen test. We'll talk you through the assessment at every stage and answer any questions you might have along the way.”  

 

Philip
Security Consultant

Why choose Redscan?

A trusted partner for pen testing

  • One of the highest accredited UK pentesting companies
  • A deep understanding of how hackers operate
  • In-depth threat analysis and advice you can trust
  • Complete post-test care for effective risk remediation
  • Multi award-winning offensive security services
  • Avg. 9/10 customer satisfaction, 95% retention rate

            

Get in touch

Complete the form for a prompt response from our team.

1000 characters left
I prefer to be contacted by:
View our privacy policy

Resources

Discover our latest content and resources

From the blog
From the blog Case studies Latest news
19th October 2021
Organisations found to take more than two days to respond to cyber-attacks
Recent research shows that organisations around the world take, on average, more than two business days to respond to a cyber-attack.
12th October 2021
Over 90% of companies experienced supply chain breaches in the past year
A new survey has found that 93% of organisations around the world suffered a direct breach over the past 12 months due to weaknesses in their supply chains.
5th October 2021
Tech adopted in pandemic linked to 74% of attacks on 94% of organisations
A recent study has found that 94% of organisations experienced a cyber-attack in the past 12 months, with almost three-quarters of the businesses attributing them to vulnerabilities created by technology adopted during the pandemic.
28th September 2021
Majority of UK finance sector vulnerable to cyber-attacks
A new report has revealed that the average UK finance company in the UK experienced 60 cyber-attacks over the past 12 months, with most anticipating this to increase in the near future.