The greatest single threat is the lack of conviction that a threat exists Lord Radcliffe - (1961)
Risk Mitigation: Security Penetration Testing
The Red Cell security penetration testing service is the highest level of physical and technical evaluation of your security profile and is designed for large installations or establishments that contain high value assets.
This specialist service is the definitive way to accurately confirm the effectiveness of asset protection measures from human adversary attacks, before the occurrence of a real event. It is also an unbiased third party security audit. The service is delivered through a carefully planned covert exercise format that follows a number of threat scenarios developed in close consultation with your management. Red Cell work closely with you to conduct an initial Threat Vulnerability Assessment of your establishment and organisation in order to identify potential human adversary groups and their likely targets; the key assets and areas of catastrophic failure within the establishment.
An exercise programme is then constructed and agreed with you to test the key vulnerabilities of your Physical Protection System that have been identified. Red Cell operatives will then use various covert and overt breaching methods and adversary attack routes to gain entry to identified targets. On completion of the exercise, a debrief and comprehensive after action report is written to highlight any deficiencies in security, along with recommendations for cost effective physical and procedural measures to put in place to improve overall security.
Our unbiased and highly regarded security experts will become part of your team to give you the ‘ground truth’ concerning your existing security profile. No other security organisation can offer you this level of expertise or detailed report and prioritised action plan.
Case History:
Members of Red Cell were tasked to conduct a penetration exercise against a major oil refinery on the UK mainland.
During a 48 hour planning phase, plans were drawn up identifying various options to defeat the integrated alarm and intruder detection system, via a number of adversary attack routes. During the exercise, the facility was successfully breached by Red Cell teams who gained entry to all primary targets. Dummy charges were positioned at key locations and notionally initiated, thus completing the mission.
The subsequent report found that whilst the existing intruder detection and alarm assessment was fully effective, the delay and response to the attack was insufficient. Red Cell recommended a number of key procedural improvements to reduce the reaction time of the response. The effect was that the adversary routes identified by Red Cell were no longer a viable option for intruders, which made a significant improvement to site security.
