The founders of The Prometheus Group were pioneers in the field of Penetration Testing in the early 1990s. In turn, they have imparted their methodologies, techniques and knowledge to a new generation of engineers who have embraced the latest in security technologies. The marriage of this knowledge with these technologies has resulted in an unparalleled depth of experience and expertise into Penetration Testing. The Prometheus Group understands that data security is about more than just technical controls. This is why our Penetration Testers are also trained in Social Engineering attack techniques. We will employ the same tools and methods that malicious outsiders would use against your organization. For example, methods use such as dumpster diving, social engineering, physical access compromise and 'simulated sabotage' would be utilized. While these techniques may seem extreme, it is important to remember: "Bad guys don't follow rules, and they don't play nice."

Before we test your network, we provide you with a fully documented test plan and work with you to find an acceptable level of exploitation, and define Rules of Engagement for the operation. We will notify you immediately if the test results include any critical security flaws or any other event that would require emergency intervention on your network. After completion of the Penetration Test, The Prometheus Group's Security Engineers will report the findings to management and technical personnel, illustrating the techniques, analysis, and results of the assessment. The report covers:

• Executive summary
• Technical vulnerability report
• Network design weaknesses
• Process weaknesses
• Other security weaknesses
• Recommended mitigation/remediation measures
• Other recommended actions on maintaining a secure network environment

The ever-increasing volume, complexity and sophistication of attacks on organizations requires that you maintain constant vigilance in all aspects of data protection. We work with you to determine the appropriate frequency for penetration testing to ensure that your network and information are protected from new sources and types of malicious attacks.

NOTE: The goal of a Penetration Test is to break into a network. To do so, The Prometheus Group's engineers must necessarily pose temporarily as bad actors. Truly bad actors are not constrained by client requirements, uptime issues or proper authorization. While The Prometheus Group takes careful measures to avoid any negative impact while posing as bad actors, the attack tool set and techniques necessarily become more direct, and the risk of negative impact rises. Another way of viewing the process is thus: