An official website of the United States government
          Here's how you know
        Here's how you knowDot gov**Official websites use .gov**
              
              A **.gov** website belongs to an official government organization in the United States.
        Https**Secure .gov websites use HTTPS**
              
              A **lock** (   Locked padlock
 ) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.  Newsroom
                                
                          
        
                Vote.gov Accessibility Menu
  

        
        Accessibility Menu
      Toggle Font Size
                                        
                                
          
                    Toggle OpenDyslexic
                                        
                                
          
                    Toggle Dyslexia-friendly black-on-creme color scheme
                                        
                                
          
                    Contact Us
 *U.S. Department of the Interior*
Menu


    close

        
        
                        
        
        
  
  
          About
      
                
        
        
  
  
          About
                    Interior
              
      
                
        
        
  
  
          Meet the Secretary
      
                        
                    
      
              Interior Leadership
      
                        
                    
      
              Departmental Offices
      
                        
                    
      
              History of the Interior
      
                        
                    
      
                      Join
              
      
                
        
        
  
  
          Careers
      
                        
                    
      
              Pathways Program
      
                        
                    
      
              Veterans Employment
      
                        
                    
      
              Volunteer
    
  

      
              
      
                        
                    
      
              Bureaus
      
                
        
        
  
  
          Bureaus
                    Bureaus
              
      
                
        
        
  
  
          Bureau of Indian Affairs
      
                        
                    
      
              Bureau of Indian Education
      
                        
                    
      
              Bureau of Land Management
      
                        
                    
      
              Bureau of Ocean Energy Management
      
                        
                    
      
              Bureau of Reclamation
      
                        
                    
      
              Bureau of Safety & Environmental Enforcement
      
                        
                    
      
              Bureau of Trust Funds Administration
      
                        
                    
      
              National Park Service
      
                        
                    
      
              Office of Surface Mining Reclamation & Enforcement
      
                        
                    
      
              U.S. Fish & Wildlife Service
      
                        
                    
      
              U.S. Geological Survey
    
  

      
              
      
                        
                    
      
              Priorities
      
                
        
        
  
  
          Priorities
                    Addressing the Drought Crisis
      
                        
                    
      
                      Advancing Environmental Justice
      
                        
                    
      
                      America the Beautiful
      
                        
                    
      
                      Clean Energy Future
      
                        
                    
      
                      Increasing Outdoor Access
      
                        
                    
      
                      Investing in America
      
                        
                    
      
                      Strengthening Indian Country
      
                        
                    
      
                      Tackling the Climate Crisis
    
  

      
              
      
                        
                    
      
              Media
      
                
        
        
  
  
          Media
                    Blog
      
                        
                    
      
                      Press Releases
      
                        
                    
      
                      Media Contacts
      
                        
                    
      
                      Multimedia
    
  

      
              
      
    
          
    
  



Search

  Search


          
          
                      Newsroom
                                
                          
        
                Vote.govAccessibility Menu
  

        
        Accessibility Menu
      Toggle Font Size
                                        
                                
          
                    Toggle OpenDyslexic
                                        
                                
          
                    Toggle Dyslexia-friendly black-on-creme color scheme
                                        
                                
          
                    Contact Us
  


Breadcrumb
        Home
                            Office of the Chief Information Officer
                            Our Services
                            Penetration Testing


  In This Section
    
      
      Home
                              About Us
                            OCIO Leadership
                              Our Services
                            Federation Services (SAML/OAuth)
                              Assessment and Authorization (A&A)
                              Customer Support Center
                              DOI Cloud Services
                              Hosting Services
                              Penetration Testing
                              Telecommunications
                              Policy & Mgmt
                            Controlled Unclassified Information (CUI) Program
                              Digital Strategy Report
                              E-GOV Program
                              Enterprise Architecture
                              Government Paperwork Elimination Act
                              Information Management and Assurance
                              Information Quality
                              Paperwork Reduction Act
                              Portfolio Management
                              Privacy
                              Records Management
                              Section 508 (Accessibility)
                              Support
                            Customer Support Center (CSC)
                              Paperwork Reduction Act Support
                              Privacy Support
                              Records Management Support
                              Section 508 Support
                              Controlled Unclassified Information Coordinators
                  
                  Share
  FacebookTwitterLinkedInRedditPinterest

  Penetration Testing

**The OCIO's ISSLOB Services help you protect your network and applications**
OCIO's ISSLOB Penetration Testing team provides a real-life snapshot of your security controls' effectiveness.  OCIO’s professionals are experts in the latest attack methods and techniques used to exploit information systems. Our team attempts to break into your network to find vulnerabilities before attackers do. This unique process identifies vulnerabilities and threats; tests the reaction and identification capabilities of your agency; and provides a measurement of continuous improvement.
**Why Do I Need This Test?**Penetration testing is a controlled attack simulation that helps identify susceptibility to application, network, and operating system breaches. By locating vulnerabilities before the adversaries do, you can implement defensive strategies to protect your critical systems and information.
**What Does Penetration Testing Actually Test?**
OCIO ISSLOB performs both black box--*no knowledge*--and white box--*with knowledge and/or privileges*--Penetration Testing.   Assessments include:
***Web Application Vulnerability Assessment*** – These assessments focus on the security of Web-based applications by attempting to exploit faulty application logic. Fixes and approaches are recommended that will increase the security of the application, host server, and network.
***External Network Vulnerability Assessment*** – These assessments focus on the security of the net-work perimeter. They check the effectiveness of firewalls, routers, intrusion detection systems, operating systems, and services available to the Inter-net or untrusted networks.
***Internal Network Vulnerability Assessment*** – These assessments apply to the security of your internal networks and systems. They mirror actual at-tack scenarios launched from an internal source or gauge the extent to which an external attacker could roam through internal networks. This test can also check the security of your wireless LAN infra-structure.
***Wireless Assessment*** – This type of assessment identifies vulnerabilities in wireless 802.11 based networks through a process called war walking.  Once misconfigured or rogue access points are located, further attempts are made to connect to the network and leverage vulnerabilities.
***War Dialing*** – This type of assessment identifies vulnerable modems by dialing a predetermined set of numbers. Once an active modem is located, at-tempts are made to identify the service and penetrate the system.**What Is the Procedure for a Penetration Testing Test?**
Our security professionals have a written methodology that is constantly updated with new techniques and vulnerabilities. The attack scenario often begins with passive probing to provide a map of the target network, and then progressively escalates. Configuration weaknesses and vulnerable systems are exploited to gain unauthorized or privileged system access. Throughout the test, ISSLOB works with you to identify appropriate target systems and to keep you up to date on the attack's progress. A brief summary re-port provided on the last day of testing identifies all discovered vulnerabilities and the affected systems.
**Results**
OCIO’s Penetration Testing team can perform a realistic hands-on simulated attack of your network and applications. We will not only find out where the holes in your systems are, we will also determine how good your current intrusion monitoring devices are at recognizing and re-porting the attack. With the results of our tests and recommendations, you can optimize your agency’s security stance and be confident that your network will resist malicious intrusions. We don't just identify problems-we help define a solution balanced around your business objectives.
**Rapid Engagement**
***No separate contract is required. No sole source justification is required.***
The OCIO ISSLOB COE is positioned to provide Assessement and Authorization (A&A) services to DOI and federal government agencies.  As an OMB designated ISSLOB, work is initiated through an Inter-Agency Agreement (IAA) with the Interior Business Center Line of Business.
The IAA will reference an agreed upon Memorandum of Understanding, with supporting Proposal, Statement of Work and Rules of Engagement documents.  Authority Under Which A&A is Provided:  Economy Act – 31 USC 1535 and Working Capital Fund, 43 USC 1467, 1468.
**For Additional Information:**
Please contact the OCIO ISSLOB at ISSLOB@ios.doi.gov or 303-969-5700.
Was this page helpful?
    
      Yes
No
This page was not helpful because the content:
          

        
  
      Please provide a comment


  
Leave this field blankReturn to top
    
          Subscribe
    
      Enter your email address to subscribe to Interior news and updates


  Leave this field blank
Section Title
  

        
      About DOI
                              Accessibility
                              Contact Us
                              Copyright
                              Disclaimer
                              Information Quality
                              Privacy Policy
                              Site Map
                              Vulnerability Disclosure PolicySection Title
  

        
      Budget & Performance
                              Coronavirus Updates
                              Cummings Act Notices
                              Diversity, Inclusion & Civil Rights
                              FOIA
                              Inspector General
                              No Fear Act reports
                              Open Government Initiative
    
          U.S. Department of the Interior
                    Stewarding Conservation and Powering Our Future

                          1849 C Street NW, Washington, DC 20240