The network was locked down, so the testers went through overlooked devices
An industrial and logistics real estate investment trust. Outcome verified
The problem
A lean industrial real estate investment trust was happy with its IT but wanted to quantify its exposure to cyber criminals. With a very small internal team, nobody had ever looked at the environment the way an attacker would. Host-based firewalls hid almost everything on the network, so the risk sat in overlooked devices and stale configurations.
Why it mattered
The firm's central file share held online banking access, financial records and sensitive employee documents. A compromise meant potential loss of control of bank accounts and legal exposure over employee data.
What we did
With little visible on the network, Vizius focused on overlooked devices. On one of them, a known firmware flaw and default credentials gave up stored network credentials, and a stale firewall exception for a retired device opened a path to the file share. Findings were grouped by business impact rather than technical category so a small team could prioritize.
What changed
Prevention was graded C+. The test proved a path from an unpatched device to banking, HR and financial data and delivered ten prioritized findings with remediation guidance.
- Real estate and property
- Small company
- CIS Controls