February Luncheon - Badge, Bypass, Breach: Why Physical Tests Matter

Summary

In today’s risk-landscape, a comprehensive penetration testing program must extend beyond the network and application layers to include the physical domain. This presentation argues that incorporating physical security testing—often termed a physical penetration test—is essential for organizations to achieve true defensive depth. By simulating real-world physical intrusions, organisations can uncover vulnerabilities in access control, human behavior, infrastructure, and procedural guardrails that are frequently overlooked in traditional cyber-only assessments.
In this session, Steve will discuss some of the techniques that work almost every time in a physical security test, why physical security testing in your penetration test scope and provide real-world examples. Examples will include times where physical security controls failed and allowed our team gain access to sensitive data/devices despite the technology and security controls that were in place.

Steve Porter, CISSP, QSA, QPA, SSLCA, SSF, P2PE, GSNA, GPEN, GWAPT, GICSP CEO/Founder, SecuredNet

Steve Porter is a cybersecurity professional with over 30 years of hands-on experience, dedicated to helping organizations navigate the ever-changing threat landscape. As the Founder and CEO of SecuredNet, Steve has spent nearly two decades building a reputation as a trusted partner in cybersecurity. Based in Calgary, Alberta, his company specializes in penetration testing, vulnerability assessments, compliance services (PCI, NIST, ISO 27k and more), secure code reviews, and threat and risk assessments.

Agenda:

Doors open at 11:30am

Announcements at 11:45am

Lunch is served at 11:50pm

Presentation from 12:00 - 1:00pm

Know what’s Happening Next — before everyone else does.

Get App

Host or Publisher ASIS Chapter 162