Penetration Testing mailing list archives

What is your policy on customers particapating in a pen test?


From: Joe Klein <jsklein () mindspring com>
Date: Tue, 19 Jun 2001 01:59:45 -0400

All:

I am hearing customers request ( and some times demand ) that they be part of a
pen test.

Currently, we offer the customer 4 - 8 hours of time to review findings and show
them what we did, to access there systems. But we do this after the pen test is
complete.

I was wondering how other companies deal with this issue?

J




Current thread: