What is your policy on customers particapating in a pen test?

From: Joe Klein (jskleinat_private)
Date: Mon Jun 18 2001 - 22:59:45 PDT

  • Next message: ghandi: "Re: 3 pigs building web servers? hacker wolf?"

    I am hearing customers request ( and some times demand ) that they be part of a
    pen test.
    Currently, we offer the customer 4 - 8 hours of time to review findings and show
    them what we did, to access there systems. But we do this after the pen test is
    I was wondering how other companies deal with this issue?

    This archive was generated by hypermail 2b30 : Tue Jun 19 2001 - 14:22:59 PDT