Summary
A global communications infrastructure provider needed to understand cyber risks while separating international business units. Avocado delivered penetration testing and vulnerability assessments across five transition phases, giving the client clear findings on risks to critical assets and practical recommendations to prioritise remediation and maintain its security posture.
As a critical infrastructure provider, security and resilience is paramount. To assure and maintain the security posture of their business, our client needed to undertake a range of vulnerability scanning and penetration tests across their critical assets. This included open ports and services, such as cloud services and SaaS applications as well as remote and web-based administration consoles.
The approach required a robust security testing methodology aligned to international best practice. Our client engaged Avocado to perform five phases of security testing aligned with the broader transition program milestones – leveraging our strong project governance and delivery capability, with specialist security testing experience.
”The seamless transition has been guaranteed through Avocado’s utilisation of advanced tools, methodologies, automation, and their extensive proficiency in security testing consultation and implementation.”
Avocado was engaged to provide security testing services. This included a series of regular penetration tests over five project delivery phases of the infrastructure separation.
Avocado worked closely with stakeholders and technical staff so that the security results produced could be used to prioritise areas of most significance and relevance to our client. This also ensured that testing had the least impact to critical services. To ensure the engagement objectives were achieved, the security works were assessed using vigorous automated and manual vulnerability assessment and penetration testing methodologies – including blackbox, white box and grey box penetration testing – leveraging a variety of security tools to identify security vulnerabilities.
Avocado’s structured penetration testing framework provided our client with detailed risk findings and improvement recommendations. Our client now has a comprehensive understanding of risk and impact of their vulnerabilities to critical assets and systems, resulting from the operational restructure. With this information, they can now begin remediation activities and make improvements to decrease the risks associated with the separation, while maintaining their security posture.