recommendations for IT penetration testers?

[Ava]

HI all,

I work for a small company that has about 10-15 employees scattered all over western Europe and Brazil. We rely upon Dropbox for our file storage, and emails for our conversations, in spite of the fact that we also have Google Workspace licenses. Yes, I know it's a hodgepodge but I have made zero progress in consolidating anything.

Recently however our CFO has got the IT bee-in-his-bonnet and wants us to move wholesale to Microsoft environment, migrating from Dropbox to Sharepoint etc. He is justifiably worried that we could be hacked and our corporate data/IP etc is at risk.

Before that happens, I suggested that we do a basic security checkup. 

Is there anybody in this group that does this or can recommend a known reliable company?

Please email me with suggestions.

Regards,

Ava

[En Sutcliffe]

Hi,

So I know it's not what you asked for, but alongside seeking out a penetration testing company, it might be worth looking into carrying out some basic checks internally for free - just as a starting point, the Cyber Essentials certification is worth looking at - actually getting the certification costs money, but the assessment questions are free, there's a free Readiness Tool, and you can even book in a free 30 minute consultation if you're a small or medium enterprise (this is probably actually the least useful out of the three, though, because 30 minutes is likely to primarily be a sales pitch):

https://www.ncsc.gov.uk/cyberessentials/overview

There's a reasonable chance that you might be able to identify some low-hanging fruit that you can fix without having to spend on consultancy hours, and save more of your budget for this project on the more complex still that actually does require specialist knowledge.

This is predicated on the assumption that you have IT, a tech-savvy member of staff who can check this stuff, or a managed service provider that can assist, of course.

(source - I'm a software engineer for a financial services company who also has a cybersecurity certification) 

Thanks,

Harry

--
You received this message because you are subscribed to the Google Groups "Nottingham Hackspace - Nottinghack" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nottinghack...@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/nottinghack/a9d3063f-0ba9-493f-be68-7d5d2d1acd6fn%40googlegroups.com.