{"id":21892,"date":"2026-09-28T16:18:21","date_gmt":"2026-09-28T14:18:21","guid":{"rendered":"https:\/\/acora.com\/nl\/?post_type=case-studies&#038;p=21892"},"modified":"2026-09-30T18:06:55","modified_gmt":"2026-09-30T16:06:55","slug":"going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker","status":"publish","type":"case-studies","link":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/","title":{"rendered":"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller"},"content":{"rendered":"<h2><span class=\"ez-toc-section\" id=\"Een_frisse_kijk_op_cybersecurity\"><\/span>Een frisse kijk op cybersecurity<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>De net aangestelde Head of Cyber Security van CVS Vets stond voor een bekend dilemma. Hoe bouw je een securitystrategie die op feiten rust? Daarvoor was een eerlijk beeld van het risicoprofiel nodig, scherp genoeg om er zonder twijfel beslissingen op te baseren.<\/p>\n<p>Een traditionele pentest was een optie. Alleen wilde het team de beveiliging testen in scenario&#8217;s die dichter bij de werkelijkheid liggen.<\/p>\n<p>Het doel lag vast: de gangbare aanpak ter discussie stellen en aantonen dat de beveiliging bestand is tegen echte dreigingen. Daarvoor was diepgang nodig, onderbouwd met bewijs waar je direct mee aan de slag kunt.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Van_inzicht_naar_actie\"><\/span>Van inzicht naar actie<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Na een vergelijking van de opties koos de organisatie voor Acora en een Cyber Incident Baseline &amp; Readiness Assessment.<\/p>\n<p>Het assessment combineert red teaming met geautomatiseerde tests op duizenden aanvalsvectoren. Zo worden echte aanvallen nagebootst en komen zwakke plekken boven die anders verborgen blijven. De uitkomst was verhelderend. De klant: &#8220;Het assessment bracht een aantal verbeterpunten aan het licht die een traditionele pentest niet had gevonden.&#8221;<\/p>\n<p>Met die inzichten kon het team gericht prioriteren. Kritieke kwetsbaarheden werden direct opgelost. Voor structurele verbeteringen kwam er een planning op langere termijn, met elke actie gekoppeld aan de impact die ze oplevert. Het resultaat was een roadmap die volledig op bewijs rust.<\/p>\n<p>Een flink deel van de verbeteringen zat in tools die al in huis waren. Daarmee lag er meteen een stevige basis om op door te bouwen.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Security_is_nooit_af\"><\/span>Security is nooit af<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Een van de grootste ontdekkingen: de bestaande tools konden veel meer. Ze deden hun werk naar behoren, alleen werd pas met deze diepere test duidelijk wat er nog te winnen viel. Met een paar snelle aanpassingen en betere configuraties haalt de organisatie nu meer uit de investeringen die al gedaan waren.<\/p>\n<p>Het bevestigde ook iets wat vaak wordt vergeten. Security is nooit af. Regelmatig bijstellen en meebewegen met nieuwe aanvalstechnieken is inmiddels een vast onderdeel van de strategie.<\/p>\n<p>Het team is tevreden met de keuze om de traditionele pentest los te laten. Of zoals ze het zelf zeggen: &#8220;We zijn blij dat we iets anders hebben geprobeerd. Ook over de samenwerking zijn we tevreden.&#8221;<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Waarom_dit_ertoe_doet_een_driedimensionaal_beeld\"><\/span>Waarom dit ertoe doet: een driedimensionaal beeld<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Deze threat-led aanpak geeft een driedimensionaal beeld van de beveiliging. Alle verdedigingslagen worden getoetst, inclusief de kwetsbaarheden die normaal buiten beeld blijven. Wat overblijft is een roadmap met duidelijke prioriteiten.<\/p>\n<p>Het effect reikt verder dan technische fixes. De organisatie kan investeringen beter onderbouwen en verbeteringen gerichter plannen. Aanvalsketens vroeg doorbreken is een strategische prioriteit geworden. Het team weet nu waar het moet beginnen. Dat geeft vertrouwen voor het moment dat een echte aanval zich aandient.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Een frisse kijk op cybersecurity De net aangestelde Head of Cyber Security van CVS Vets stond voor een bekend dilemma. Hoe bouw je een securitystrategie die op feiten rust? Daarvoor was een eerlijk beeld van het risicoprofiel nodig, scherp genoeg&#8230;<\/p>\n","protected":false},"author":16,"featured_media":21895,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"single-resources-gated-content.blade.php","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"case_study_categories":[222],"service-type":[336],"class_list":["post-21892","case-studies","type-case-studies","status-publish","format-standard","has-post-thumbnail","hentry","case_study_categories-case-studies","service-type-cyber-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.6 (Yoast SEO v28.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller - Acora Netherlands<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller\" \/>\n<meta property=\"og:description\" content=\"Een frisse kijk op cybersecurity De net aangestelde Head of Cyber Security van CVS Vets stond voor een bekend dilemma. Hoe bouw je een securitystrategie die op feiten rust? Daarvoor was een eerlijk beeld van het risicoprofiel nodig, scherp genoeg...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/\" \/>\n<meta property=\"og:site_name\" content=\"Acora Netherlands\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-30T16:06:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/acora.com\/wp\/wp-content\/uploads\/2026\/01\/cat-vet-case-study-cvsvets.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2500\" \/>\n\t<meta property=\"og:image:height\" content=\"1487\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@AcoraLtd\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/\",\"url\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/\",\"name\":\"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller - Acora Netherlands\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/acora.com\\\/wp\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cat-vet-case-study-cvsvets.jpg\",\"datePublished\":\"2026-09-28T14:18:21+00:00\",\"dateModified\":\"2026-09-30T16:06:55+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/#primaryimage\",\"url\":\"https:\\\/\\\/acora.com\\\/wp\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cat-vet-case-study-cvsvets.jpg\",\"contentUrl\":\"https:\\\/\\\/acora.com\\\/wp\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cat-vet-case-study-cvsvets.jpg\",\"width\":2500,\"height\":1487,\"caption\":\"Cyber Incident Baseline & Readiness Assessment vetinary case study\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/acora.com\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Case Studies\",\"item\":\"https:\\\/\\\/acora.com\\\/nl\\\/case-studies\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/acora.com\\\/nl\\\/\",\"name\":\"Acora Netherlands\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/acora.com\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/#organization\",\"name\":\"Acora\",\"url\":\"https:\\\/\\\/acora.com\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/acora.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/07\\\/Logo-YouTube.png\",\"contentUrl\":\"https:\\\/\\\/acora.com\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/07\\\/Logo-YouTube.png\",\"width\":196,\"height\":196,\"caption\":\"Acora\"},\"image\":{\"@id\":\"https:\\\/\\\/acora.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/AcoraLtd\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/acora-it-cyber-security-ai\\\/\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/AcoraIT\"],\"email\":\"netherlands@acora.com\",\"legalName\":\"Acora Netherlands B.V.\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller - Acora Netherlands","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/","og_locale":"en_GB","og_type":"article","og_title":"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller","og_description":"Een frisse kijk op cybersecurity De net aangestelde Head of Cyber Security van CVS Vets stond voor een bekend dilemma. Hoe bouw je een securitystrategie die op feiten rust? Daarvoor was een eerlijk beeld van het risicoprofiel nodig, scherp genoeg...","og_url":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/","og_site_name":"Acora Netherlands","article_modified_time":"2026-09-30T16:06:55+00:00","og_image":[{"width":2500,"height":1487,"url":"https:\/\/acora.com\/wp\/wp-content\/uploads\/2026\/01\/cat-vet-case-study-cvsvets.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@AcoraLtd","twitter_misc":{"Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/","url":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/","name":"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller - Acora Netherlands","isPartOf":{"@id":"https:\/\/acora.com\/nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/#primaryimage"},"image":{"@id":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/#primaryimage"},"thumbnailUrl":"https:\/\/acora.com\/wp\/wp-content\/uploads\/2026\/01\/cat-vet-case-study-cvsvets.jpg","datePublished":"2026-09-28T14:18:21+00:00","dateModified":"2026-09-30T16:06:55+00:00","breadcrumb":{"@id":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/#primaryimage","url":"https:\/\/acora.com\/wp\/wp-content\/uploads\/2026\/01\/cat-vet-case-study-cvsvets.jpg","contentUrl":"https:\/\/acora.com\/wp\/wp-content\/uploads\/2026\/01\/cat-vet-case-study-cvsvets.jpg","width":2500,"height":1487,"caption":"Cyber Incident Baseline & Readiness Assessment vetinary case study"},{"@type":"BreadcrumbList","@id":"https:\/\/acora.com\/nl\/case-studies\/going-beyond-traditional-penetration-tests-and-thinking-like-an-attacker\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/acora.com\/nl\/"},{"@type":"ListItem","position":2,"name":"Case Studies","item":"https:\/\/acora.com\/nl\/case-studies\/"},{"@type":"ListItem","position":3,"name":"CVS Vets: Verder dan de traditionele pentest: denken als een aanvaller"}]},{"@type":"WebSite","@id":"https:\/\/acora.com\/nl\/#website","url":"https:\/\/acora.com\/nl\/","name":"Acora Netherlands","description":"","publisher":{"@id":"https:\/\/acora.com\/nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/acora.com\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/acora.com\/nl\/#organization","name":"Acora","url":"https:\/\/acora.com\/nl\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acora.com\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/acora.com\/wp-content\/uploads\/sites\/3\/2021\/07\/Logo-YouTube.png","contentUrl":"https:\/\/acora.com\/wp-content\/uploads\/sites\/3\/2021\/07\/Logo-YouTube.png","width":196,"height":196,"caption":"Acora"},"image":{"@id":"https:\/\/acora.com\/nl\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/AcoraLtd","https:\/\/www.linkedin.com\/company\/acora-it-cyber-security-ai\/","https:\/\/www.youtube.com\/user\/AcoraIT"],"email":"netherlands@acora.com","legalName":"Acora Netherlands B.V."}]}},"_links":{"self":[{"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/case-studies\/21892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/case-studies"}],"about":[{"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/types\/case-studies"}],"author":[{"embeddable":true,"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/comments?post=21892"}],"version-history":[{"count":7,"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/case-studies\/21892\/revisions"}],"predecessor-version":[{"id":21930,"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/case-studies\/21892\/revisions\/21930"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/media\/21895"}],"wp:attachment":[{"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/media?parent=21892"}],"wp:term":[{"taxonomy":"case_study_categories","embeddable":true,"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/case_study_categories?post=21892"},{"taxonomy":"service-type","embeddable":true,"href":"https:\/\/acora.com\/nl\/wp-json\/wp\/v2\/service-type?post=21892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}