Re: Pentest Letter of Achievement/Certificate

[John Kinsella <jlk () thrashyour com>]

On Wed, Jul 13, 2005 at 09:17:57PM -0700, Travis Good wrote:
> http://www.hackersafe.com

I nearly gave that a serious response. ;)

> Alot of people accept this kind of unrealistic request from a client 
> because 1) they dont know any better, 2) are unable to educate their 
> client and wont turn down a gig even when their client is unrealistic
> or 3) dont care and just want money.
>
> Security audits are not marketing tools.

Very true.  But say you have a client who realizes what needs to be
done(say, director of tech) but has a boss who wants the rubber stamp.
There's just situations where it's needed.

I think (hope) we're not talking about the stamp without the report, but
more of putting an official on something already done.

John