Primary Scope:

• Generali Insurance engaged CyBourn to conduct penetration testing services for its entities – pension funds and insurance
• Infrastructure penetration testing for the common network of the two divisions
• Penetration testing for internal critical applications
• Penetration testing for internet facing applications
• Social engineering exercises – phishing simulation for employees to establish security awareness

Results:

• Identification and Mitigation of Vulnerabilities: Our penetration testing revealed vulnerabilities in both the common network and the internal and internet-facing applications. These vulnerabilities were promptly addressed and patched to enhance the security of Generali’s systems.
• Strengthened Security for Pension Funds and Insurance Entities: Our specialized penetration testing for Generali’s pension funds and insurance divisions ensured that these entities are secured from potential cyber threats, thereby protecting critical financial data.
• Enhanced Application Security: The penetration testing performed on internal and internet-facing applications resulted in a more robust security framework for these applications, reducing the risk of data breaches.
• Improved Employee Awareness: The social engineering exercises, particularly phishing simulations, helped raise Generali employees’ awareness about cybersecurity threats. This resulted in an improved organizational culture around cyber safety, reducing the risk of successful phishing attacks.
• Comprehensive Security Insights: The testing exercises provided Generali with detailed insights into their cybersecurity posture, helping them understand potential risks and necessary enhancements to their security measures.
• Ongoing Security Maintenance: Post-testing, Generali has an enhanced understanding of their infrastructure’s security status and potential threats, allowing for more effective ongoing security maintenance.