Penetration Testing: Re: "bonded and insured"

["Bill Casti, CQA" <quire () casti com>]

You get bonded and insured as a consultant, regardless of the specialty.
Contact The Hartford insurance company. That's who I get my bonding
insurance from as an independent consultant. I pay around $400 a year for
up to a million dollars coverage for "non-performance", malfeasance, etc.

==============================================================================
    Bill Casti, CQA                                 Email: bill () casti com
     Cell: +1 877 289 2645                            Fax: 703 834 8209
------------------------------------------------------------------------------
                There's no limit to what can be accomplished
                 if it doesn't matter who gets the credit.  
==============================================================================

On 22 May 2001, Malf Easance wrote:

> Hello Fellow Pentesters,
>   I've submitted a proposal for a pentest and security audit
>   Some of the feedback from the prospective customer has indicated that
>   the High-Llamas in his company want their pen tester to be
>   'bonded and insured'.
>   Have any of you ever experienced this? How did you respond?
>   Is there really a way to get bonded OR insured for pen-test consulting?
>   I have CISSP and CISA certs.
>   Thanks for your input
>   Malf
>
> ____________________________________________________________________
> Get free email and a permanent address at http://www.amexmail.com/?A=1