2. Company Overview
Global fuel company with chapters
in more then 80 countries
Filling stations all over the country
Massive network infrastructure
Public websites
3. Audit Scope
Internal Penetration Testing
and IT-security Assessment
Social Engineering Attacks
External Penetration Testing
and IT-security Assessment
5. Actions performed
Network Security
Testing
Web Application
Security Testing
Social Engineering
Attacks
Malware Attacks Internal Network
Infrastructure Analysis
Incident Response
Planning
6. Business risks discovered
Personal Identifiable Information leakage through web-
sites
Third party resources configuration files leakage which
may lead to malicious actions on filling stations
Employees are prone to Social Engineering attacks