Part of Data Security Standard 9 - IT protection
Risks
There are a couple of general risks involved in undertaking a test.
1. The test may be mistaken for the reconnaissance or delivery stage of a cyber attack. As many of the tools and techniques used for penetration testing are the same ones as used by hackers. This can be mitigated by informing all the interested parties and knowing and keeping to your boundaries.
2. The test may have an adverse effect on the asset(s) being scanned. Depending on the aggressiveness of the test and the vintage of the asset this could result in an adverse effect, such as service unavailability requiring a reboot.
Last edited: 1 September 2022 3:38 pm