Why is penetration testing important?
A financial institutions information security (IS) strategy is typically built upward from policy to implementation. Because the rapid pace of todays business creates continuous change in a financial institutions IT infrastructure, theres even more pressure to maintain an up-to-date information security posture. How secure an IT infrastructure is at any point in time depends not only on each and every component network, servers, workstations, applications, services, and so on but also on the relationships between components. In turn this means that information security must become a characteristic of the total IT infrastructure, not just something that is applied to evaluation of individual components. Thats where penetration testing comes in. Its a tool for understanding real information-security risks that your financial institution is exposed to daily.
