Frequently Asked Questions

Frequently Asked Questions

Know More. Decide Better.

Explore common questions about our services, implementation processes, and security solutions—all in one place.
What is the difference between Vulnerability Assessment (VA) and Penetration Testing (PT)?

Vulnerability Assessment is an automated process that scans your systems to identify known security vulnerabilities. It focuses on identifying “what” the weaknesses are.

Penetration Testing is a manual, proactive simulation of a real-world attack by an ethical hacker to exploit those weaknesses. It focuses on “how deep” an attacker can go and what damage they could cause.

How long does a typical VAPT engagement take?
The duration depends on the scope—such as the number of IP addresses, the complexity of web/mobile applications, or the size of the network. On average, an engagement takes between 1 to 3 weeks, including testing and reporting.
Why is VAPT essential for my business compliance?
VAPT is a mandatory requirement for many international standards and local regulations, including ISO 27001, PCI DSS, and Indonesian regulations such as OJK/Bank Indonesia mandates and the Personal Data Protection Law (UU PDP).
Which methodologies does PantoLab follow for testing?
We adhere to globally recognized industry standards, including the OWASP Top 10 (for web applications), OWASP Mobile ASVS, and the OSSTMM or NIST SP 800-115 frameworks for network infrastructure testing.
What is the difference between Black Box, Grey Box, and White Box testing?

Black Box: The tester has no prior knowledge of the system, simulating a pure external attack.

Grey Box: The tester has limited access (e.g., standard user credentials) to test for internal privilege escalation.

White Box: The tester has full access to source code or network architecture for a deep-dive comprehensive analysis.

How do you ensure that testing won't disrupt our business operations?
We prioritize system stability by using non-destructive payloads and coordinating testing schedules—often during off-peak hours. Our team follows strict Rules of Engagement (RoE) and will always seek explicit authorization before testing critical or sensitive services.
Does your testing cover 'Zero-Day' vulnerabilities?
While standard VAPT focuses on known vulnerabilities (CVEs), our manual Penetration Testing phase specifically looks for Business Logic Flaws and unique attack vectors that automated scanners cannot detect, providing protection against sophisticated threats.
What is included in a PantoLab VAPT report?
You will receive a comprehensive report featuring an Executive Summary for management and a Detailed Technical Finding section for IT teams. Each finding includes a Proof of Concept (PoC), risk severity levels (Critical to Low), and clear remediation steps.
Do you provide re-testing services after we fix the vulnerabilities?
Yes. We offer a re-testing phase to verify that the patches and security controls you implemented have successfully closed the identified gaps.
How often should we conduct a VAPT?
Industry best practices recommend performing a VAPT at least once a year or whenever significant changes are made to your infrastructure, such as new feature releases, network migrations, or hardware upgrades.
What is a Security Operations Center (SOC) and why does my business need one?
A SOC is a centralized unit that deals with security issues on an organizational and technical level. It continuously monitors your IT environment to detect, analyze, and respond to cybersecurity incidents. As threats become more sophisticated, a SOC provides the 24/7 vigilance needed to prevent data breaches.
What are the main differences between Managed SOC (Remote) and On-Site SOC?

Managed SOC (Remote): Our team monitors your systems from our professional facility. It is cost-effective, quick to deploy, and offers 24/7 coverage without needing extra office space.

On-Site SOC: We deploy our experts and tools directly at your office. This is ideal for organizations with high-security requirements or strict regulations that mandate data remains within their physical premises.

How does a SOC help with regulatory compliance like ISO 27001 or UU PDP?
Most regulations require continuous monitoring and rapid incident response. A SOC provides the necessary logs, audit trails, and 24/7 monitoring evidence required to pass compliance audits and prove that your organization is actively protecting data.
Which SIEM platforms does PantoLab support for installation?
We are platform-agnostic and have expertise in industry-leading SIEM (Security Information and Event Management) solutions such as IBM QRadar, Splunk, Microsoft Sentinel, and ELK Stack (Wazuh). We help you choose and configure the one that best fits your budget and infrastructure.
How long does it take to set up a SIEM and transition to a Managed SOC?
The deployment usually happens in phases. Initial SIEM installation and log integration typically take 2 to 4 weeks. The "tuning" phase—where we reduce false positives and refine alert rules—usually takes an additional month to ensure optimal performance.
How does the SOC team handle incident response when a threat is detected?
Once an alert is triggered, our analysts perform a rapid triage to confirm the threat. If it’s a high-risk incident, we follow a strict Incident Response Plan: Containment, Eradication, and Recovery. We will immediately notify your internal IT team and provide step-by-step guidance to mitigate the impact.
Can you integrate logs from cloud environments (AWS, Azure, Google Cloud) and on-premise servers?
Yes. Our SIEM and SOC services are designed for Hybrid-Cloud environments. We can ingest logs from cloud workloads, SaaS applications, firewalls, endpoints, and traditional on-premise servers to provide a "single pane of glass" visibility.
Do you offer 24/7/365 monitoring, or is it only during business hours?
Our standard Managed SOC service provides 24/7/365 coverage. Cyber threats don't take holidays, so our team is always active, ensuring your organization is protected even at night and during weekends.
How is the pricing for Managed SOC calculated?
Pricing is generally based on the volume of data ingested (EPS - Events Per Second or GB/day) and the number of log sources (servers, users, or devices) being monitored. We offer flexible packages tailored to both SMEs and large enterprises.
What kind of reports will I receive from the SOC team?
Clients receive Daily/Weekly Executive Summaries of security events and Monthly Deep-Dive Reports that include incident trends, system health status, and recommendations for strengthening your overall security posture.
What is the difference between ISO Implementation and ISO Certification?

Implementation is the process of building the framework, policies, and technical controls within your organization to meet the standard’s requirements.

Certification is the final audit conducted by an independent third-party body to officially verify that your organization is compliant. PantoLab provides expert assistance during the implementation phase and accompanies you through the certification audit.

How long does it typically take to achieve ISO 27001 certification?
Depending on the organization's size and current security maturity, the process usually takes 4 to 8 months. This includes Gap Analysis, Risk Assessment, Document Development, Internal Audit, and the final Certification Audit.
Can we integrate multiple ISO standards (e.g., ISO 27001 and ISO 27701) at the same time?
Yes. We highly recommend an Integrated Management System (IMS) approach. Since many standards share similar requirements (like Risk Management and Internal Audits), integrating them reduces redundancy, saves time, and lowers costs.
Why is ISO 27701 important if we already have ISO 27001?
While ISO 27001 focuses on Information Security, ISO 27701 specifically extends those controls to Privacy Information Management. It is the international gold standard for demonstrating compliance with global privacy laws like GDPR and local laws like Indonesia's UU PDP.
What are the key benefits of ISO 22301 (Business Continuity Management)?
ISO 22301 ensures your business can remain operational during and after a crisis (e.g., cyberattacks, natural disasters, or system failures). It involves conducting a Business Impact Analysis (BIA) to identify critical processes and setting up recovery strategies to minimize downtime.
How does ISO 20000-1 help our IT Service Management?
ISO 20000-1 focuses on delivering quality IT services to customers and internal users. It helps your organization shift from reactive "firefighting" to proactive service delivery through standardized processes for incident, change, and capacity management.
How does PantoLab help our company comply with Indonesia's Personal Data Protection Law (UU PDP)?
We provide a comprehensive compliance roadmap: starting with Data Mapping (identifying what personal data you hold), conducting a Data Protection Impact Assessment (DPIA), and implementing the technical and organizational measures required to protect data subject rights.
What happens if our organization is found non-compliant with Data Privacy regulations?
Non-compliance can lead to severe consequences, including high administrative fines, criminal sanctions for certain violations, and significant reputational damage. Our role is to build a "Privacy by Design" framework to mitigate these risks.
Do we need to appoint a Data Protection Officer (DPO)?
Under UU PDP and GDPR, certain organizations (especially those processing large-scale sensitive data or public bodies) are required to have a DPO. PantoLab can help define the DPO's role or provide advisory services to support your internal DPO.
Does PantoLab provide training for our employees during the compliance process?
Absolutely. Compliance is as much about culture as it is about technology. We provide Security Awareness Training and specific workshops for process owners to ensure everyone understands their role in maintaining the standard.
What is a "Gap Analysis" and why is it the first step?
A Gap Analysis is a diagnostic "health check" where we compare your current practices against the requirements of the chosen ISO standard. It allows us to create a precise, cost-effective roadmap for your compliance journey.

Expect a response from us shortly

  • 24/7 Assistance with technical issues
  • Knowledge Base and Self-Service
AI Cindy
Email
WhatsApp
Chat with Us

Expect a response from us shortly

  • 24/7 Assistance with technical issues
  • Knowledge Base and Self-Service
AI Cindy
Email
WhatsApp