Finding weaknesses and improving system security - Word Drop

Ethical hacking is when someone breaks into a system to highlight ______ without causing permanent damage or loss. A ______ hacker is an expert who has been paid or invited to test security. A ______ hacker is an outsider who finds a weakness but does not exploit it for personal gain.

Penetration testing uses ethical hackers to test all aspects of a system's security on behalf of the company. They check that all ______ have the latest patches installed. They also look for weak ______ that are easy to guess. Testers must gain ______ before they begin. Afterwards they document the issues found and recommend improvements to the company. The process is repeated until security reaches a suitable standard.

Organisations analyse system data and user ______ to spot risks, such as staff opening files they do not need. They can check access logs, which record how staff use their computers. They can also use ______ to show staff actions in real time. This helps them identify unusual activity that might be a ______.