Episode 3 of 10
What a penetration test is, and is not
A scan lists known vulnerabilities; a penetration test actually tries to get in and chains small flaws together.
Check yourself
What does a penetration test add to an automated scan?
A scan lists known vulnerabilities, most of which do not matter for you. A pentest chains small flaws together the way an attacker would.
Show text
06 · Basic
Secure and resilient
Back-ups you can restore, access per person, NIS2 and ISO 27001 without panic.
0:35Ep. 1A back-up only counts once you have restored it
0:38Ep. 2Recovery time, in plain language
0:41Ep. 3What a penetration test is, and is not
0:37Ep. 4Access to exactly what you need, nothing more
0:37Ep. 5Does NIS2 apply to you?
0:40Ep. 6Reporting an incident within 24 hours
0:41Ep. 7What ISO 27001 actually asks of you
0:40Ep. 8SPF, DKIM, DMARC: mail that arrives
0:44Ep. 9Hear it from us, not from your customers
0:38Ep. 10Recap: one server down, the work goes on
After this series you can:
- You have a restore tested and record, per system, how much loss and downtime you accept.
- You give each role only the access it needs, and have someone test where an attacker gets in.
- You check whether NIS2 applies to you and record who does what in an outage or incident.