RE: Business justification for pentesting

["Craig Wright" <cwright () bdosyd com au>]

What you ask for is a TRA - Threat Risk Analysis
 
This is not a pen test. This involves the classification and valuation of assets, a completion of a vulnerability 
assesssment, an impact analysis. etc etc
 
Even the Vulnerability assesssment is more involved than a pen test.
 
Craig

        -----Original Message----- 
        From: Irene Abezgauz [mailto:irene.abezgauz () gmail com] 
        Sent: Wed 31/08/2005 6:33 PM 
        To: sectraq () gmail com 
        Cc: pen-test () securityfocus com 
        Subject: Re: Business justification for pentesting