Penetration Testing: Pen Test and Sec Org

[Soso Aboso <sosokkam () yahoo com>]

Greetings,
 
In the organization I work for there are two security team, one with enterprise role “Information Security” and their 
mean focus on governance, awareness, and risk assessment. The second team is for IT “IT Security” and their mean focus 
on IT security projects and managing the security Devices.  The question I have, did any of you came through such 
organization structure, is it recommended, what standards support such security organization, who should be the owner 
of penetration tests in such organization?
 
Thanks you in advance for your feedback
 
Regards



      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------