Re: External Pen-testing

["Quackenbush, Darlene - quackedh" <quackedh () JMU EDU>]

Don,

We have used outside companies for pen testing--as we are bringing up new systems/services and as part of regular 
audits.  Recently it's been 3 or so a year for different parts of the environment

--dq.



--------------------------------
Darlene H. Quackenbush
James Madison University
Information Technology
MCS 5733
Harrisonburg, VA 22801
540.568.3905
-------------------------------

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Don 
Nightingale
Sent: Thursday, October 27, 2011 3:16 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] External Pen-testing

Hi folks.  We have some auditing recommendations, and want to get an idea of what other institutions are doing.

To what extent have any of you engaged outside companies to perform penetration testing?



--
Don Nightingale
Network Engineer
Wellesley College