Solution

The preparations started with a precise coordination of the objectives and time frame for the test, followed by a detailed analyses of the site’s weak points. This was carried out through a combination of internet research and targeted on-site observation to identify and specifically investigate potential access vulnerabilities.

The penetration test itself was carried out in two phases: The first test took place during peak office hours on a working day, and the second test took place at night to assess differences in security levels and response capabilities. In both scenarios, the previously identified vulnerabilities were systematically used to stimulate access to restricted areas and to realistically test the effectiveness of the security measures.

The results of the penetration test were carefully documented and summarised in a detailed report. This report contained in-depth information on sensitive, publicly accessible data, identified security weaknesses, vulnerabilities in access management and information on employee security awareness. Finally, the report was presented to the Group’s security officers and supplemented with specific recommendations for optimising security measures.

Voice of a customer: „We gained valuable insights regarding our security situation from the results of the penetration test. We will use the recommendations to optimise our protective measures and increase the security awareness of our employees.”