Web vulnerability scanning of hosted environments and SAAS

[Jared Evans <jared.evans () GALLAUDET EDU>]

While it's a no-brainer to run web vulnerabilities scanning against
University-hosted web servers, what kind of web scanning policy/agreements
do you have for external web servers that may be run by outside contractors
(on the behalf of the University) inside their hosted environment and what
about web-based SAAS used by a number of departments?

-- 

Jared Evans
Information Security Officer
Gallaudet Technology Services
Gallaudet University
jared.evans () gallaudet edu