The RSI security site breaks down the techniques in a few detail, but the procedure in essence goes similar to this: Overview requests and request any concerns (pro suggestion- it’s crucial to decide on a highly trained auditing company that’s equipped to reply thoughts all through the whole audit method) https://www.nathanlabsadvisory.com/blog/nathan/the-benefits-of-vulnerability-assessments-and-penetration-testing-services-in-the-uae/