Re: Pen-Testing contracts

From: Bojan Zdrnja (bzdrnja@dianne.zesoi.fer.hr)
Date: Thu Jul 18 2002 - 03:36:09 EDT


At 13:35 17.7.2002 +0200, Johan Denoyer wrote:
>Hi everyone,
>
>I have been looking for sample audit contracts in the archives, but the
>sites they point to are now invalid.
>So I am now asking here to you all if anyone would have sample audit
>contracts to share with me.

Same here. Some time ago I was also trying to find decent sample on the web.
I had to make a contract for vulnerability scanning - although it is not as
complex as real penetration testing, much of the details remain same. Only
reference that I found on the web was at the Password Crackers Inc.'s web site:
http://www.pwcrack.com/Penetration_Testing/Penetration_Testing_Contract/penetration_testing_contract.html
You can find some useful things also here:
http://www.foundstone.com/pdf/rfp_template.pdf

Best regards,

Bojan Zdrnja

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:23 EDT