Re: Penetration Testing

[Ced Bennett <Ced.Bennett () STANFORD EDU>]

Tim:
We had some security review work done on several of our major administrative
systems last year (several different engagements) that included some
penetration testing (well beyond just scanning for vulnerabilities).  The
firm we used was SystemsExperts, Inc. based in Boston (but with offices
around the country).  You can find contact information at
http://www.systemexperts.com/.  They are very professional and did an
excellent job for us.  
 
Ced Bennett
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Cedric Bennett          Ph (650) 723-0728        Fax (650) 723-2011
Director of Information Security Services
  Information Technology Systems & Services
Stanford University
Polya Hall, Room 103
255 Panama Street
Stanford, CA 94305-3055                   Ced.Bennett () Stanford edu



-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of St. Laurent, Tim
Sent: Monday, February 10, 2003 8:40 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Penetration Testing



Hello everyone, 

I was curious if anyone has contracted a third party to provide penetration
testing and auditing for their network and systems?  We are looking at
having someone do an "real" penetration test of our network and our systems.
I would like to avoid any company that just comes in and scans our network
for vulnerabilities (i.e. a ISS scan) as we can do this ourselves.  If
anyone has any recommendations as to which companies out there provide the
best service,  I would appreciate any good or bad experiences.  


Thanks, 

Tim 

----------University of Richmond---------- 
Tim St. Laurent 
Security Administrator 
*tstlaure () richmond edu 
*804-289-8655 



********** Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/memdir/cg/. 


**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.