Enterprise information security and penetration testing

In this study, Information Security has been investigated, Information Security and standards have been assessed, threats which causes Information Security weaknesses overviewed, our country?s Information Technology law has been examined and web applications that are facing the highest threat have been focused. During the studies, SQL injection and penetration tests that constitute high threat have been thoroughly examined. Applications in this subject have been investigated in detail, and precautions that should be taken are presented. Concept of human factor-technology-education which is important for providing a high level of Information Security has been overviewed and effects of penetration testing on these factors have been investigated. Solution suggestions are offered to cease threats and make existing condition better and to obtain high level Enterprise Information Security. vii Because of being the first comprehensive study on the field of Enterprise Information Security in Turkey, this study aims to contribute the necessary importance, being a guide source for institutions and organizations raise an awareness of Information Security and direct future studies in this field. Key Words : Enterprise Information Security, Penetration Testing, Information Security Management Systems, Information Security, Web Application Security, Social Engineering