Penetration testing article
What a Network Penetration Test Includes
A network penetration test examines approved infrastructure for weaknesses that could enable unauthorized access, privilege escalation, or movement between systems. External and internal targets are defined before testing begins.
Assessment overview
What the assessment includes
Test coverage
What is examined
Final coverage depends on the agreed systems, access, objectives, exclusions, and safety requirements.
Industry references
How coverage is informed
PTES
Engagement structure, intelligence gathering, threat modelling, validation, and reporting.
NIST SP 800-115
Technical assessment planning, execution, analysis, and mitigation guidance.
CIS Controls
Context for safeguards affecting assets, access, configuration, logging, and network monitoring.
These references inform the assessment. Testing does not itself provide certification or guarantee compliance.
Final report
What is included in the report
The report is designed for both decision makers and the teams responsible for remediation.
Discuss the required scope and report.
DIGITPOL HK will confirm the targets, constraints, evidence needs, and reporting requirements before testing.