RE: Sample pent test agreement

["Erin Carroll" <amoeba () amoebazone com>]

Everyone,

Actually I'd like to expand upon Eric's question to the list a bit. What are
some of the common terms/agreements pen-testers should include in their
contracts and why? Examples of how such terms (or lack of) in writing have
become issues during pen-testing would be interesting to hear.

Erin Carroll
"Do Not Taunt Happy-Fun Ball"



-----Original Message-----
From: evb [mailto:swiver () cox net] 
Sent: Sunday, June 26, 2005 9:13 AM
To: pen-test () securityfocus com
Subject: RE: Sample pent test agreement

Might anyone be kind enough to share with me a sample penetration testing
agreement (written contract) to use with clients so that I need not reinvent
the wheel?  Thank you so much.

Eric
tossing_salads () hotmail com