During Cyber Security Awareness month, we will be exploring some cyber related terms you may have heard of but may not fully understand. We hope to raise awareness and ultimately work to improve UK cyber security resilience. In this article, we will explore CHECK & CREST pen testing.
Does it have anything to do with biros?
Pen testing, short for penetration testing, is a critical practice that helps organisations identify and mitigate vulnerabilities in their systems. It should form a vital component of any robust cyber security strategy, and involves simulating cyber-attacks on a computer system, network, or web application to identify and exploit security vulnerabilities. These tests are conducted by qualified cyber security professionals who use the same tools and techniques as malicious hackers, but do so with the permission of the organisations who employ them. Following testing, a written report is produced that details the issues and how to fix them. One of our senior penetration testers has confirmed that although biros are not regularly used as part of his pen testing work, a scented gel pen is his preferred writing implement of choice!
CHECK
Arcanum is approved by the NCSC to deliver CHECK pen testing, but what does that actually mean? CHECK was developed for pen testing on government departments, public sector bodies and the organisations forming the UK’s Critical National Infrastructure. Only organisations that have been accredited by the NCSC can provide CHECK services. This accreditation involves in-depth examination testing methodologies, report quality, and policies and procedures around pen testing and handling of sensitive data. In short, being CHECK-approved – known as ‘Green Light’ – means that an organisation is acknowledged by the NCSC as being capable of carrying out high-quality testing and reporting, including those critical to the UK government.
Arcanum is recognised as having ‘Green Light’ status.
In addition to CHECK pen testing, Arcanum is also accredited to deliver CREST pen testing.
CREST
The Council for Registered Ethical Security Testers (CREST) is an international not-for-profit, membership body representing the global security industry. Their stated aim is “to increase professionalism in the security testing industry” and they place requirements on member companies in order to ensure that consistent standards of services are delivered. To deliver CREST accredited penetration testing, Arcanum have undergone a rigorous accreditation process, covering the policies, processes, and competencies we have in place for the delivery of our services.
Why does it matter?
As a CHECK and CREST accredited provider, Arcanum’s testing has been assured to the highest legal, ethical, and technical standards. Our pen testing process follows established best practices, and our team holds considerable expertise in the field, continually developing their skills by maintaining their professional certifications. Our team is led by Tam, who is a UK Cyber Security Council Chartered Cyber Security Professional for Security Testing. Always look for a CREST approved company to provide high quality testing and consider CHECK if your project is very high risk or has Government requirements. Arcanum are trusted to deliver a range of both CHECK and CREST approved pen testing activities including application, infrastructure, cloud, Operational Technology testing, and bespoke services. Our services use our CHECK-approved methodologies by default, ensuring the highest standard of testing for you and your organisation. We have extensive experience working to a high level in a wide range of sectors spanning Defence, Critical National Infrastructure, Space, Manufacturing, Finance, Telecoms, Energy, and more. Please read more on our Penetration Testing Services page or if you would like to see how we can use our expertise to help you secure your business, please do not hesitate to get in touch by filling out a contact form.