Cybersecurity Audit and Pentesting for Banking

In the course of a thorough IT security audit, the team of cybersecurity specialists (technical experts, IT auditors, finance experts, and psychologists) applied the methods of penetration testing and social engineering. Our check revealed that overall the system was well-protected, but there were still areas for improvement. The team identified certain gaps in security, the exploitation of which would allow an intruder to violate confidentiality and retrieve classified data including their customers’ personal information such as secret words, password hashes, etc. We found vulnerabilities both in their software for internal use and in the client-server application. Social engineering methods helped us evaluate the overall level of security awareness among personnel and assess how likely the bank’s employees were to be involved in malevolent actions.