In the Mystery Guest (light) Test, we send undercover hackers to test how well your security is working. We perform 1 specific scenario, such as gaining access to the server room, and assess whether employees report suspicious situations and access control is effective.
What is a Mystery Guest Test (light)?
In a Mystery Guest (light) Test, we test how well your employees respond to unexpected visitors. For example, a "mystery guest" trying to gain access to the server room by posing as a technician for a routine check. We see if employees follow proper security procedures, such as checking identity and adhering to access protocols.
This test focuses on one specific scenario, as opposed to a complete security test that tests all possible scenarios. Upon completion, you will receive a report with findings and recommendations to strengthen security and make your employees more aware of potential risks. Upon completion, you get a detailed report with recommendations to address weaknesses and improve your security.
Our approach to a Mystery Guest Test
The Mystery Guest Test tests the security of your organization by an undercover "mystery guest" posing as an outside party. This person attempts unplanned access to see if employees are following proper procedures. We identify weaknesses and risk areas to improve security and increase awareness within your organization.
Preparation and Approval
- We consult with you to clarify the goals and expectations of the test.
- After approval of the plan, we determine the profile of the "mystery guest" (for example, a vendor or outside party) and the location(s) we will test.
Simulation of the unexpected visit
- The mystery guest tries to gain unplanned access to your organization, such as by posing as an outside party or service provider.
- We test how well employees respond to entry, whether they follow proper security procedures (such as checking identification and access).
Observation of security procedures
- We observe physical security, such as whether access controls are working properly, whether confidential information is left unattended, and whether unattended access badges or documents are visible.
- We also watch for any weaknesses in the overall security of the property, such as open doors or unsafe work areas.
Security risk analysis
- During the test, we identify all potential security risks, such as unauthorized access to confidential information or compliance with internal procedures.
- We assess whether employees are alert and take appropriate action when faced with unplanned situations.
Reporting and feedback
- After testing, we prepare a detailed report documenting all findings and risk areas.
- The report also includes specific recommendations for improvements in security and procedures.
Follow-up and improvement plan
- We schedule a follow-up meeting to discuss the findings and implement any improvement measures.
- You will receive advice on how to further train employees and make them aware of the security risks that have been identified.
With our Mystery Guest Test, we strengthen your organization's security and increase awareness of security risks within your team. We test how well employees react to unexpected visitors so they are better prepared to fend off threats.
Why a Mystery Guest Test?
Peace of mind and Confidence
Ensure strong security and build trust with your customers with a knowledgeable team. Security starts with awareness!
Complying with Regulations
Comply with legal requirements and make your team aware of security risks. This is how you make your business more secure.
Preventing Security Leaks
Learn to recognize and address security risks to prevent sensitive information from falling into the wrong hands.
Cost Saving
Increase cyber security in your company and save on recovery costs by making your team aware of online risks.
What other Social Engineering Testing do we offer?
Phishing test
We simulate email phishing attacks to assess how well your employees handle suspicious emails and links.
Mystery Guest (full)
This comprehensive test includes various on-site scenarios to evaluate staff response and identify vulnerabilities.
Executive Threat Analysis
We analyze senior management risks and vulnerabilities, including the impact of targeted attacks on their data.
Smishingtest
In this test, we send fake text messages to test whether employees share sensitive information through their mobile devices.
Social Media Mining
Attackers use public social media data from LinkedIn and Facebook to target employees and gain trust.
USB Drop Test
We leave USB sticks behind to observe whether employees pick them up and their reactions to them.
Vishingtest
We pretend to be a customer or colleague and try to obtain sensitive information over the phone, such as passwords or company information.
CV Portal Test
We send fake job applications with fake CVs to check whether employees share sensitive information or open insecure files through the CV portal.
Mystery Guest (light)
We test one specific scenario on-site to see how employees react to a targeted social engineering attack.
What Customers Say:
Speak with our ethical hackers today! Email: info@sectricity.com
Call: UK +44 7383 833041 or US +1 (646) 687 2163
Collaboration With Top Companies:
