With data breaches in the news weekly it is becoming evident for everyone that a lack of security can cost companies large amounts of money. Investments in security are by many seen as a form of insurance. It could prevent you from being in the headlines in the next cyber incident, or it could at least help your case that you had actually tried to avoid being vulnerable.
A shared environment containing private and confidential information requires excellent access control. To verify that the access control works as it should, it must be tested. But testing authorization isn’t easy: Continue reading “Authorization testing on steroids”