Summary
This case study focuses on the British Council's implementation of a penetration testing service. The British Council, an organization that promotes cultural and educational exchange, required a solution to address security vulnerabilities across its numerous digital platforms. The chosen service is a bespoke penetration testing service delivered remotely by CHECK and CREST certified engineers from MTI. The testing encompasses external networks, web applications, and mobile and desktop applications, adhering to industry standards such as the SANS Institute's guidelines and OWASP Top Ten vulnerabilities. The service aims to reduce risks associated with data loss, brand damage, and compliance failures while enhancing the development cycle and multi-factor authentication practices. Through detailed testing reports, priority issues are identified and remediation recommendations provided. The British Council benefits from a flexible and scalable service that meets the demands of its extensive web portfolio in more than ten countries, ensuring timely delivery and effective vulnerability management.
