Scanning--more then one side to the argument

[Sherman Hand <shand () adelphia net>]

There has been a on going discussion about the scanning results on our customers.

Thought one says that "any" port on a standard nmap, showing as "open" is a security risk.

Thought two says, no since some things need to show in a state of open.

Should we be stating that through proactive scan, when we find any port
showing as open, that it is a security issue waiting to happen?

Or only if we can show a issue?

Thoughts?

Shand