In 2025, IT teams are tasked with the increasingly complex task of managing cybersecurity requirements alongside an ever-growing list of responsibilities.

Organisations are striving to improve their security posture, while driving awareness of security issues internally, and ensuring end users are using systems and data securely.

Proactive teams monitor and audit IT systems to detect early signs of compromise, but time and resources are not on their side.

Day-to-day IT support is still the main occupier of time, with more than 59% of IT teams spending most of their time on IT support. The 9am rush of phone calls about password resets, software issues and trapped emails is still very real.

Meanwhile, time spent on protecting against security threats is just 16%, much of which is swallowed up delivering patches, workarounds and fixes within CE+ timeframes.

Without the time to dedicate to proactive security activities, a lack of regular and reliable visibility of external vulnerabilities leads to increased cyber risk.

Amidst all of this, annual penetration testing remains a staple of the IT and security team’s toolkit.

Why do we penetration test?

• Conducting annual security tests is considered good practice in the industry. Regular testing can help to ensure security measures are up-to-date and effective.
• Standards like PCI DSS (Payment Card Industry Data Security Standard) mandate annual security assessments to protect cardholder data.
• Testing may help you to meet and evidence the requirements of other frameworks including GDPR and ISO 27001.
• Annual security tests provide external validation of your security posture. This can help to build trust with stakeholders, including customers, partners and regulators.
• Many cyber insurance policies require regular security assessments to prove proactive management of security risks. By performing annual tests, you can meet these requirements and potentially benefit from lower premiums or better coverage terms.
• Many customers and suppliers expect partners to have strong security practices in place. Annual security tests can be a requirement in contracts or service level agreements.

Four ways to get the most out of your annual test

While penetration tests remain an important part of many organisations’ security strategy, there are several areas in which they fall short. By having an awareness of the trusty pen test’s shortcomings, you can make sure you’re effectively filling the gaps and maximising the return on your security investment.

1. Use your test as a benchmark

Annual security testing provides a snapshot of your system’s security posture at a specific point in time. While you may make improvements based on the test results, new vulnerabilities can be introduced through subsequent changes or configurations. While your annual test is a useful benchmark, your security status can quickly become outdated, leaving your system exposed to new threats that arise after the test.

2. Be aware that your environment constantly evolves

Annual tests might not capture the dynamic nature of your IT environment. Systems, applications and networks are constantly evolving, and new vulnerabilities can emerge at any time. Relying solely on annual testing can give a false sense of security, as it may not account for changes or new threats that occur between tests.

3. Be very clear about what needs to be in scope

Security tests are often scoped to focus on specific areas or components of your environment. If certain systems or applications are excluded from the scope, potential vulnerabilities in those areas may go undetected. This can leave significant parts of your infrastructure unprotected and vulnerable to attack. If you miss an element from your annual test, it’s usually tricky and/or expensive to re-run it with an amended scope.

4. Fill in the gap in your testing cycle

Cyber incidents can occur at any time, and the average timescale for detecting and responding to these incidents is often much shorter than your testing cycle. Annual testing does not provide the continuous monitoring needed to detect and respond to threats in real-time. This misalignment can result in delayed detection and response, increasing the risk of a successful attack. Have a plan for filling the gap.

How can you fill the gap left by annual testing?

Annual testing falls short because it’s static, it’s unresponsive to change and it allows a huge window of time for vulnerabilities to be introduced and exploited. The lifecycle of a security breach is less than an annual testing cycle.

LIMA has developed a solution to perfectly complement, and in some cases replace, your annual security test.

Vulnerability Detection and Remediation (VDR) from LIMA uses a combination of software and human intervention to review your environment, reveal vulnerabilities and resolve them within an SLA that’s aligned to Cyber Essentials Plus.

By using VDR you can remove the risks presented by your annual test and free up the time and resources taken up by the constant demands of patching within your IT team.

1. Use your test as a benchmark

Because the average lifecycle of a vulnerability and its eventual exploitation is within your annual security test timeframe, we need to reduce window.

One of the key motivations to test more frequently is for the purpose of retesting, which involves running the same tests again after remediation to confirm that any fix has been successful. Even simple errors, like forgetting to reboot after applying a patch, can cause a vulnerability to persist.

With VDR, changes and developments in your environment are reviewed on a continuous basis. The service spots vulnerabilities and remediates them against an SLA aligned with Cyber Essentials requirements.

2. Be aware that your environment constantly evolves

VDR gives a picture of your environment, with no changes required to allow access – which is often a requirement of penetration testing. In fact, we recommend you keep everything as it is on a day-to-day basis so we get a full and accurate view, and we can see what layer of your stack is compromised or at risk.

3. Be very clear about what needs to be in scope

With asset-based pricing, you select the assets that you want to be covered by the scan. These can change and flex on a monthly basis in response to shifting requirements. 

4. Fill in the gap in your testing cycle

VDR scans are run near-continuously, and when we spot a vulnerability, we address it within the SLA window, comfortably beating the average lifecycle of a vulnerability and filling the gap left behind by annual testing.  

VDR continuously scans your environment for vulnerabilities and resolves them before they can be exploited, keeping you ahead of the game in the fight against cybercrime.

Want to remove the cyber-strain from your IT team? Contact one of our experts on 0345 345 1110 to discuss your free cyber-readiness assessment, or drop us an email: enquiries@lima.co.uk

This piece delves into the valuable insights derived from Capametix ransomware assessments completed at today’s Infosecurity event. 

By analysing the data and considering its implications, we can explore strategies for organisations like yours to bolster their ransomware recovery efforts and enhance their overall security posture.

The self-assessment responses shed light on the current state of ransomware recovery capabilities across organisations. 

Let’s delve into some key findings. 

Offline, Encrypted Backups of Data: A robust 75% of respondents recognised the importance of offline, encrypted backups of data. This data security measure ensures that critical information remains protected from ransomware attacks. However, 25% of respondents either disagreed or were unsure about the effectiveness of this capability. This raises concerns about the potential vulnerability of their backup systems. Organisations should consider strengthening their backup practices by adopting secure, offline storage solutions and implementing robust encryption measures.

Regularly Updated “Golden Images”: Approximately 90% of participants agreed that maintaining regularly updated “golden images” of critical systems is vital for rapid system recovery. However, 10% either disagreed or were unsure about the significance of this capability. This indicates a potential gap in their disaster recovery strategies. Organisations should prioritize the creation and maintenance of up-to-date system images to minimise downtime and expedite recovery processes in the event of a ransomware incident.

Cyber Incident Response Plan: An overwhelming 95% of respondents acknowledged the importance of a well-defined cyber incident response plan. This demonstrates a growing awareness of the need for a structured and rehearsed approach to handling ransomware attacks. However, 5% either disagreed or had uncertainties about the significance of this capability. Organisations must focus on developing comprehensive incident response plans, including predefined roles and responsibilities, incident escalation procedures, and communication protocols, to effectively mitigate the impact of ransomware incidents.

We then need to think about applying the Insights i.e. creating strategies for enhanced resilience based on this data, organisation can implement the following strategies to strengthen their ransomware recovery capabilities

Our primary recommendation is to Foster a Culture of Security Awareness: With 80% of participants already implementing cybersecurity user awareness and training programmes, organisations should continue investing in education and training initiatives to enhance employee vigilance against ransomware threats. Regular security awareness sessions, simulated phishing exercises, and ongoing communication can empower employees to identify and report suspicious activities promptly.

Number two on our list is to Prioritize Vulnerability Management: Given that 70% of respondents conduct regular vulnerability scans and 65% ensure software and operating systems are up to date, organisations should maintain a proactive approach to vulnerability management. This includes timely patching, vulnerability remediation, and continuous monitoring to minimise the attack surface and mitigate the risk of ransomware infections.

Finishing our top three Strengthen Third-Party Relationships: Considering the increasing exploitation of trusted relationships by adversaries, organisations must assess the risk management and cybersecurity practices of their third-party partners and managed service providers (MSPs). By establishing robust contractual obligations, conducting regular audits, and promoting information sharing, organisations

 can enhance their overall resilience against ransomware attacks.

Having engaged with numerous companies at Infosecurity, the story has not changed or been proven incorrect at all. It is vital that you start Building Resilience Against Ransomware Threats because ransomware attacks will continue to evolve and pose significant challenges for organisations across all industries. 

By leveraging the insights obtained by LIMA and VMware, organisations can take proactive steps to enhance their ransomware recovery capabilities – strengthening offline backups, maintaining updated system images, developing comprehensive incident response plans, fostering a culture of security awareness, prioritising vulnerability management, and strengthening third-party relationships are all key strategies to enhance resilience against ransomware threats.

If you need any advice or support on your cyber posture, visit us at stand L50 or complete one of our assessments here. 

Why LIMA?

We are the strategic IT partner for the most ambitious organisations, we deliver insight-led IT services that focus on delivering tangible business outcomes whilst overcoming Business and IT challenges at the same time focusing on Resilience, Growth and Optimisation. LIMA.co.uk

About VMware

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control.

At the heart of everything we do lies the responsibility and the opportunity to build a sustainable, equitable and more secure future for all.​  VMware.com

For more information, please contact: enquiries@lima.co.uk

LIMA alongside VMware were busy at today’s Infosecurity helping numerous organisations review their Cybersecurity and Ransomware posture using the NIST-based security framework and Capametrix assessments.

With all the anonymised data gathered via Capametrix assessments, we can reveal intriguing insights into the current state of cybersecurity practices.

A Journey Through Cybersecurity Capabilities

Risk Assessment: One of the crucial aspects of cyber security is the ability to identify and document asset vulnerabilities. Our data revealed that only 40% of respondents agreed or strongly agreed with this capability. This statistic highlights a significant challenge in accurately recognising potential vulnerabilities within enterprise systems. It is imperative for organisations to enhance their risk assessment practices and adopt robust methodologies to identify and document asset vulnerabilities effectively.

Information Protection Processes and Procedures: As data breaches continue to rise, protecting sensitive information has become paramount. Our analysis exposed a discrepancy in information protection processes and procedures. While 55% of respondents agreed or strongly agreed with their ability to identify configurations posing potential risks, 30% of respondents disagreed or strongly disagreed. This finding emphasises the need for organisations to adopt comprehensive measures to secure critical data effectively and bridge the gap in their information protection practices.

Analysis and Recommendations: Strengthening Cybersecurity Resilience

Bridging the Vulnerability Gap: The responses revealed that 65% of respondents expressed uncertainty regarding their ability to effectively identify and document asset vulnerabilities. This statistic underscores the need for organisations to invest in vulnerability management plans and prioritise regular vulnerability scans. By addressing this vulnerability gap, enterprises can proactively identify and mitigate potential risks, thereby strengthening their cybersecurity defences.

Fortifying Incident Response and Recovery: Cyber incidents pose a constant threat to organisations. While 70% of respondents acknowledged the importance of having response and recovery plans in place, 25% expressed disagreement or uncertainty. Improving incident response functions within an organisation and establishing incident alert thresholds are critical to an organisation’s ability to detect, respond to, and recover from cyber security incidents. Organisations should prioritise incident response training, conduct regular drills, and refine their incident response plans to enhance their resilience against cyber threats.

Charting the Path to Cybersecurity Excellence

It’s only been our first day at Infosecurity, however, the conversations we had have provided valuable insights into the current state of cybersecurity capabilities among organisations across industry.  The data revealed areas where companies excel and areas that require further attention. By aligning their cyber security practices with the NIST framework and adopting the recommended measures outlined in this blog, organisations can embark on a journey toward cybersecurity excellence. This includes mitigating risks, safeguarding critical assets, and effectively protecting against the ever-evolving cyber threat landscape.

If you need any advice or support on your cyber posture, visit us at stand L50 or complete one of our assessments here. 

Why LIMA?

We are the strategic IT partner for the most ambitious organisations, we deliver insight-led IT services that focus on delivering tangible business outcomes whilst overcoming Business and IT challenges at the same time focusing on Resilience, Growth and Optimisation. LIMA.co.uk

About VMware

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control.

At the heart of everything we do lies the responsibility and the opportunity to build a sustainable, equitable and more secure future for all.​  VMware.com

For more information, please contact: enquiries@lima.co.uk

Limited spaces available!

We will contact you to confirm a slot.

Key points:

• LIMA to front VMware’s latest zero trust security solutions at Infosecurity
• VMware launches new network and security virtualisation and cloud DR recovery platforms
• Personalised cyber assessments offer business leaders journey to zero-trust IT estates
• Infosecurity runs from 20^th June at Excel, London

LIMA has been selected to showcase VMware’s zero-trust security solutions at Europe’s largest cyber security conference, Infosecurity.

“We are delighted to showcase our market-leading software-defined stack alongside LIMA at InfoSec 2023. VMware to this day remain a disruptive, engineering-led software company. With NSX Security as the focal point of an expansive and growing Networking and Security portfolio, we aspire to continue to push boundaries, innovate, and most importantly, keep our customers secure.

LIMA and VMware have a long-standing and highly successful relationship. It makes the world of difference for us, and our customers when we are working in lockstep with trustworthy, dependable, and highly skilled partners such as LIMA,” commented Scott McKinnon, Field CISO, VMware.

Central to LIMA’s consultative approach is insight-led assessments, which enable organisations to better understand how to improve their security posture. We encourage businesses to take the assessments in advance, or visit stand L50, to discuss their security challenges with technical experts from both VMware and LIMA.

“We are thrilled to partner with VMware for this prestigious event. It’s a great testament to LIMA’s capabilities and credentials as a security-focused MSP, with services spanning cyber, cloud services and modern workplace,” says Danny Masters, CEO, LIMA.

At the show, LIMA will be offering cyber assessments and delivering demonstrations of VMware’s Gartner-acclaimed advanced security (NSX) and Ransomware Recovery as a Service (RRaaS) platforms.

LIMA/VMware will be available at stand L50 between the 20^th and 22nd of June, at ExCel, London.

Why LIMA?

We are the strategic IT partner for the most ambitious organisations, we deliver insight-led IT services that focus on delivering tangible business outcomes whilst overcoming Business and IT challenges at the same time focusing on Resilience, Growth and Optimisation. LIMA.co.uk

About VMware

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control.

At the heart of everything we do lies the responsibility and the opportunity to build a sustainable, equitable and more secure future for all.​  VMware.com

For more information, please contact: enquiries@lima.co.uk