pen-testing permission form for charity work

[robert.portvliet at gmail.com (Robert Portvliet)]

I think for doing 3rd party testing (even for free), you're going to
need something written up by an attorney & probably 'errors &
omissions' insurance at a minimum.

Just because you're doing it 'pro-bono'' doesn't mean someone won't
sue if something goes wrong (no good deed goes unpunished, lol)

Someone please feel free to tell me I'm wrong, but everything I've
ever been told is that the 'permission slip' level is only good for an
internal pen test.




On Mon, Nov 16, 2009 at 3:34 PM, Adrian Crenshaw <irongeek at irongeek.com> wrote:
> Hi All,
> ?? I've been thinking of doing some free security/pen-testing work for local
> non-profits. This would help me get some hands on experience. I'd like to
> cover my butt legally also. What "permission forms" would you reccomend for
> such circumstances?
>
> Thanks,
> Adrian
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com