Re: Pentest Letter of Achievement/Certificate

From: Mark Teicher (mht3@earthlink.net)
Date: Wed Jul 13 2005 - 08:17:41 EDT


http://www.cybertrust.com/offerings/certifications.html

-----Original Message-----
From: blowfish 448 <blowfish448@hotmail.com>
Sent: Jul 12, 2005 4:52 PM
To: pen-test@securityfocus.com
Cc: blowfish448@hotmail.com
Subject: Pentest Letter of Achievement/Certificate

Hi,

any of you know if any 'standards' or accepted guidelines exist for a letter
or certification
of succesfull resistance to Penetration Testing/Vulnerability Assessment.
Customers often
demand to have a proof delivered by their Penetration Test service provider
to show to their
partners and customers.

The idea of course is not to disclose sensitive information but to briefly
describe
the environment tested and how - according to which methodologies and the
attack vectors
tested for.

Thanks in advance

"The Truth Lies at the Heart of the Art of Combat. Once it is mastered, Though shall fear no one, though the devil himself may bar thy way...."



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:32 EDT