Incident Readiness Testing
Having a plan in place to deal with a security incident is vital if you are to respond swiftly and effectively. But just how well executed will that plan be when its truly needed? This will be of particular concern to organisations measuring their security posture against the CESG Information Assurance Maturity Model.
Incident Readiness Testing examines the robustness of the underlying policies and procedures and can also include a simulated attack. The attacks are non-destructive and can be highly customised to be as stealthy or as overt as required. Targets agreed in advance, allowing a ‘real life’ view of how effective your incident response process is.
