Black Team
Physical Security
Physical security assessment and Physical Intrusion Testing
1.0
We also have a plan to attack your facility.
Feeling safe?
How confident are you that the security devices implemented are really effective? We can help you in the analysis, verification and improvement of your physical security through a general analysis of the infrastructure and processes. The aim is to evaluate the effectiveness of existing controls, identify any risks and develop useful reference models for future checks on new or existing buildings.
Let’s study you first. Then we knock on the door.
Maybe not.
This first phase aims to analyze the current state of the physical security of the company, define the improvement actions and provide support in the implementation of the necessary policies and procedures, in relation to the best practices of the sector and the regulations in force.
Below are the various steps provided:
• Sharing information relating to the buildings to be analysed/tested.
• Documentary assessment and interviews with company staff.
• Inspection in the offices concerned, with the presence of local representatives.
• Development of Gap Analysis documentation with respect to sector best practices, current regulations, internal guidelines.
• Discussion of the results together with the client company.
• Medium/long-term support in the preparation of new policies, procedures and checklists for internal use.
We simulate unauthorized physical access.
that’s how we do
INTELLIGENCE
We collect data from open sources (OSINT) to verify the perimeter, identify any critical information on the network and possible threat actors.
PHYSICAL RECOGNITION
We carry out an incognito inspection of the buildings around the perimeter.
CYBER ATTACK
We carry out an attack against IT devices relevant for physical security (video surveillance, access systems.
PHYSICAL ATTACK
We proceed with a scheduled attack simulation task, with attempts at unauthorized physical access.
Why?
To assess the resilience of company infrastructures in the face of events of a different nature that could affect operations.
Who?
Large companies and multinationals, public bodies and government institutions. Regulated sectors such as finance, energy, healthcare and telecommunications. Organizations with compliance requirements that require regular physical security audits.
Deliverable
Drafting of formalized operational and security requirements in the form of control policies and/or checklists. These models will ensure compliance with physical security best practices and the maintenance of high levels of protection.
