Penetration Testing and ASV

The Science Museum Group ("SMG") has a general annual audit requirement to perform external penetration testing against the ICT estate, which has been reinforced by several ongoing information security projects which include penetration testing and vulnerability scanning requirements, either directly or to support project success. These projects are for Cyber Essentials plus accreditation achievement, PCI DSS compliance and GDPR compliance. SMG aim to instruct comprehensive security testing of ICT infrastructure, services and web applications by an impartial, ethical and technically proficient actor. This is to identify security flaws in configuration, technologies and applications.