Financial firms tend to think of security in terms of cyber attacks and fraud, and rightly so. But a convincing visitor who reaches a trading floor, a meeting room booked for a confidential deal or a desk with an unlocked laptop can achieve what months of phishing might not. In finance, information is money, and much of it is still discussed, printed and left lying around in the physical world.
What is at stake
Client records and account details. Market-sensitive information about deals, results and trades. The trust of high-net-worth clients who chose a firm partly for its discretion. And the regulatory consequences when that trust is breached.
What we test
Reception and visitor controls in busy, prestigious buildings. Access to trading floors, deal rooms and executive areas. Out-of-hours security, cleaning and maintenance access. Printing, confidential waste and clear desk practices. How staff respond to someone who looks and sounds as if they belong.
Supporting resilience
Regulators expect financial firms to understand and test their operational resilience. Physical penetration testing provides independent evidence of how well premises and people protect the services that matter most.
Discreet by default
Testing is arranged with a small group of senior contacts, so it reflects normal day-to-day behaviour without causing alarm.
Where deal rooms carry particular risk, add a corporate TSCM sweep. For the technical side, see penetration testing. Arrange a confidential conversation.
