Penetration Testing mailing list archives

RE: "bonded and insured"


From: Frank Knobbe <FKnobbe () KnobbeITS com>
Date: Sun, 27 May 2001 13:21:30 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

-----Original Message-----
From: Bill Casti, CQA [mailto:quire () casti com]
Sent: Friday, May 25, 2001 7:40 PM

It's the Business Owners Package Policy from The Hartford Insurance
Company. Annual premium is $350. The coverages for my solely-owned 
"S" corporation are:


Ha! The same applies to my company (S-Corp). I have the same package
from Hartford (for $350/yr, although the amounts covered are only a
million.... hm... have to talk to my agent about that).

However, that package is the General Liability. It does not cover
mishaps during pen-tests. Those things are covered under an  E&O
(Errors & Omissions) Insurance package. I've got a million in E&O,
which costs me about $2,000/yr. In regards to Pen Testing, I'm pretty
sure that general liability does not apply. But an E&O would cover
you if you rebooted a server during a port scan and the client
presses charges for downtime.

I believe that, while this covers insurance, the being 'bonded' is
still a different story.

Regards,
Frank





-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.8
Comment: PGP or S/MIME encrypted email preferred.

iQA/AwUBOxFFqpytSsEygtEFEQK4PACfYjsWO9/UVuZgOh1Jw5ZtO47lw3kAnjjl
Hg+ek+8Iov6WEGo8XYT09O+b
=3rrI
-----END PGP SIGNATURE-----


Current thread: