4. Red Teaming
A red team is an independent group that challenges an
organization to improve its effectiveness.
Penetration testers assess organization security, often
unbeknownst to client staff. This type of Red Team
provides a more realistic picture of the security
readiness than announced assessments.
(c) Wikipedia
5. Red Teaming … of the airport security
95% failure rate
67 out of 70
8. Attack planning
The weakest part in security?
The security level of the system is
determined by its most insecure element
The most valuable information in company?
PEOPLEMONEY CLIENTS
Choosing targets Finance
IT(backups, access, data)
Accounting
Infrastructure Legal
9. Risks analysis
Technological risks:
Malware/viruses/intrusions
Cyber attacks
Service provider failure
Physical security (f.e. loss of devices)
Data related vulnerabilities
Phishing
Human risks:
Human error/mistakes
Insider sabotage/theft
Lack of skills
Lack of knowledge
Lack of guidance
