From the course: CompTIA PenTest+ (PT0-002) Cert Prep

Unlock this course with a free trial

Join today to access over 23,400 courses taught by industry experts.

Technical and physical controls

Technical and physical controls

From the course: CompTIA PenTest+ (PT0-002) Cert Prep

Start my 1-month free trial Buy for my team

Technical and physical controls

“

- One of the class of outcomes that you should expect from a well-executed penetration test is a list of recommendations, and it should be a list. It shouldn't just be one thing. There should be a list of recommendations spread across classes of control types. The first two types are technical and physical controls. Technical controls, remember, are the controls that are implemented via hardware, software, and configuration settings. And those should include as appropriate, things such as process level remediation, which means that you're going to recommend procedure changes to increase security. Patch management, make sure that you plan, test, execute and manage recurring patch activity for hardware, software, and firmware, specifically, software and firmware. Key rotation, you want to document key rotation cycles and validate that the procedures are followed to make sure that your encryption keys are rotated and are not used for such a long period of time that they may become stale.…

Contents