Re: Off-Topic: Memo of Understanding for Using an Ethical Hacker

[Devdas Bhagat <devdas () dvb homelinux org>]

On 25/08/04 17:30 -0400, Bruce Platt wrote:
> Without starting a huge flaming thread ...
>
> Have any of you used a "Memo of Understanding" or "Contract" (shudder) when
> asked to do some "ethical hacking" for a company on their resources,
> systems, and networks?
>
> I'd like to skip over the topic of Certification for Ethical Hackers and get
> to the issue of what one might want to include in such a document to protect
> both oneself and the company.

I assume that you mean penetration testing. The pen-test list at
securityfocus.com is meant for that, and you would probably get the best
advice there.
I remember that this question was a semi-faq when I was subscribed to
that list.

Devdas Bhagat
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards