The physical penetration testing landscape has shifted significantly over the last five years. COVID and other industry-specific events have changed expectations and delivery, in most cases, for the worse. Safety concerns, emerging threats, and a lack of standards and practices all further complicate this niche area of information security.

In this talk, we will discuss the current state of physical penetration testing and how we can do better both as potential clients and as consultants delivering this work while avoiding the chaos and mistakes of the past.