Re: Pentest Letter of Achievement/Certificate

[Mark Teicher <mht3 () earthlink net>]

http://www.cybertrust.com/offerings/certifications.html

-----Original Message-----
From: blowfish 448 <blowfish448 () hotmail com>
Sent: Jul 12, 2005 4:52 PM
To: pen-test () securityfocus com
Cc: blowfish448 () hotmail com
Subject: Pentest Letter of Achievement/Certificate

Hi,

any of you know if any 'standards' or accepted guidelines exist for a letter 
or certification
of succesfull resistance to Penetration Testing/Vulnerability Assessment. 
Customers often
demand to have a proof delivered by their Penetration Test service provider 
to show to their
partners and customers.

The idea of course is not to disclose sensitive information but to briefly 
describe
the environment tested and how - according to which methodologies and the 
attack vectors
tested for.


Thanks in advance




"The Truth Lies at the Heart of the Art of Combat.  Once it is mastered, Though shall fear no one, though the devil 
himself may bar thy way...."