Re: How to pick the right company for penetration testing?

["Nexus" <nexus () patrol i-way co uk>]

----- Original Message -----
From: "Andy Paton" <aoyt78 () dsl pipex com>
To: <pen-test () securityfocus com>
Sent: Sunday, January 25, 2004 9:53 PM
Subject: How to pick the right company for penetration testing?

[snip]

> P.S. I don't mind obvious touting for business (I will only pick a UK
company)

In that case, one option would be to pick a CHECK company from
http://www.cesg.gov.uk/site/check/index.cfm as the assault course will
certainly be an indication of a certain level of technical competence.
Obviously you can infer a couple of things from that, but I won't tout on a
technical list ;-)
The fun (personal) answer would be to kick out some ITT's and have a
shoot-off against a test box to get an idea of what you will be getting.

Cheers.


---------------------------------------------------------------------------
----------------------------------------------------------------------------