Building more resilient CNI: what industry pen testers told us Pen testers suggest what organisations can do to make their job more difficult. For those of us working in operational technology here at the NCSC, part of our job is to engage with penetration testers. Also known as ‘pen testers’, it’s their job to try to break into systems, poke holes in your infrastructure and find any weak spots. These can then be patched to improve the system’s resilience against attackers who have the same skills, but bad intentions. In this blog, we’ll explain what pen testers told us when we asked: ‘What can organisations do to make your job harder?’ The pen testers all felt that when vulnerabilities are found (and they are rarely absent), it’s much easier to implement remediations if the system is…