Pen tests and cybersecurity audit
Client: Public health organization
The client wanted to assess the robustness of its technological infrastructure and the maturity of its organizational security in light of the new framework established by the Ministry of Health and Social Services.
ESI assessed the organization’s IT security posture, information security operations, and also performed various penetration tests.
The overall objective of this mandate was to provide the necessary support and advice to ensure the client’s visibility of its local networks based on cybersecurity best practices.
The mandate included the testing of computer networks through penetration tests, the drafting and updating of security policies, support for the implementation of patches and staff awareness to better prevent risks.
- Critical nature of results and value of the report – executive, functional and technical level
- Technological complexity and requirements of the methods used
- Need to work with diverse teams at all levels of the organization, from decision makers to technical teams
- Need to provide the most accurate picture possible for a large network of sites