The NCSC defines penetration testing, or pen testing, as “a method for gaining assurance in the security of an IT system by attempting to breach some, or all, of that system's security, using the same tools and techniques as an adversary might."
Penetration testing is a great way of finding vulnerabilities in your system before an attacker causes you harm. In simple terms, it’s a bit like going to the doctor for a health check to see if you have things like high blood pressure or cholesterol, so they can be treated before they cause you harm.
What is CHECK penetration testing?
The NCSC's CHECK scheme sets standards for penetration testing that government departments, public sector bodies and the UK’s critical national infrastructure (CNI) organisations can trust.
Who is it for?
While penetration testing can be undertaken by any organisation wanting to test their cyber security, the CHECK scheme has been developed specifically for:
central government departments
public sector bodies
organisations forming the UK’s critical national infrastructure (CNI)
