Penetration Testing (a.k.a PEN-testing, pentest, Ethical Hacking) is a component of a well-defined cybersecurity portfolio aimed at testing whether an organization’s security measures are truly effective. Risk adverse entities such as insurance companies and PCI compliance look favorably on regular pentests. Universities tend to outsource this function rather than doing it in-house or a hybrid internal/external combination. Most likely due to the specialized skillset required and the difficulties of finding and/or training your security staff. In this presentation, I will speak on a new initiative at Thompson Rivers University to introduce PEN testing as part of TRU’s information security department. The talk will include getting started, a report template, and how to expose staff to the field of offensive security that may not have such a background.

Speakers