From: cbc (cboonchin@yahoo.com)
Date: Sat Jun 11 2005 - 02:42:39 EDT
Hi All,
My comments on these are:
A pentest which is useful and is able to add value to
a company who pays the service is only if the results
and finding are tally with the goal and expectation
established during the initiation of the exercise.
It is meaningless to judge which scenarios is the best
as if my goal of a pentest is to find as many as
vulnerabilites you can and exploit it, then I will say
scenario C is the best. But if my goal is to find
which vulnerbailities would impact my business most,
then scenario A is a better candidate.
In summary, ensuring a proper goal and expectation is
achieved during the planning stage is very vital. You
will find the evaluation and management process more
manageable by doing so!
Regards,
Boon Chin,
Senior Security Consultant, Singapore
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:24 EDT