What Are the Penetration Testing Steps?

by Tori Thurmond / January 8, 2024

If your organization or technology hasn’t gone through a penetration test or security testing before, you may not know what to expect. Even if you have, maybe you’re wondering what KirkpatrickPrice’s methodology and stages of penetration testing are. Once you know what to expect, you can reap the benefits of the more in-depth process with additional analysis by certified ethical hackers. At KirkpatrickPrice, there are seven stages of penetration testing.…

Conducting Incident Response Plan Table Top Exercises

by Tori Thurmond / July 10, 2023

So, your Incident Response Plan looks good on paper – it’s been mapped, planned, and documented. But has it been tested? Will it actually work? According to the 2022 IBM Cost of a Data Breach Report, organizations that had an incident response (IR) team in place and tested their incident response plan had an average of $2.66 million lower breach cost than organizations without an IR team and that didn't…

Notes from the Field: Center for Internet Security Control 7 – Continuous Vulnerability Management

by Greg Halpin / July 10, 2023

This is the seventh in a series of posts expert auditor Greg Halpin is writing on the Center for Internet Security (CIS) Controls (Version 8) discussing vulnerability management.  As a reminder, the CIS Controls are 18 critical information security controls that all organizations and information security professionals should be familiar with and implement to protect their networks and data. In this post Greg discusses what he sees in his work…

Logical Access Fundamentals for Enhanced Security: A Webinar Recap  

by Tori Thurmond / March 21, 2024

Logical access is an essential aspect of any organization’s security. You need to make sure that the right people have access to what they need but at the same time, you need to prevent unauthorized personnel from accessing sensitive information. Finding the appropriate balance can be difficult and confusing if you’re not working with security experts. That’s why one of our experienced auditors, Ron Hallford, hosted a webinar dedicated to…

Notes from the Field: CIS Control 6 – Access Control Management 

by Greg Halpin / June 22, 2023

Greg Halpin continues the Center for Internet Security (CIS) Controls series by discussing the sixth CIS control. To refresh your memory, the CIS Controls are 18 critical information security controls that all organizations and information security professionals should understand and implement to protect their networks, systems, and data from attackers.    The CIS overview for Access Control Management is - Use processes and tools to create, assign, manage, and revoke access…