Consultants carried out a site inspection of all outward facing offices and meeting rooms to assess what visibility would be achievable, providing recommendations and associated budgets for countermeasures. Additionally, consultants carried out an Identity Cloning exercise to covertly test if the premises could be easily accessed, and if sensitive information could be obtained by an outsider with no internal knowledge of the operations or workings of our client’s business.

Using social media, company press releases, building schematics (gained by claiming to be a university student) and counterfeit identification passes created by our consultants, we were able to get through all security with ease and to enter the client’s building and systems.

IPP consultants gained access onto the company’s internal network, sent emails from an internal computer, copied sensitive information and planted foreign files onto a secure machine within the internal network (locally).