Andy Tang

iTrader: (3)

If I were looking to employ or have someone trained up as a penetration tester, what should I look for?

Are there recognised accreditations/certifications?

I want to be able to cover external and internal threats, as well vunrabilities within the various computers, servers, appliances and infrastructure.

Cheers
Andy

Kieran_Burns

iTrader: (1)

Hello Again

You'll need to look for Cisco CCSP, MS MCSA Security +, you may also want to consider SCP (SCP Program Certifications - The Security Certified Program - Security Certified Network Specialist - Security Certified Network Professional - Security Certified Network Architect)

Bleeding all sorts to look for to be honest. Really, a thorough grounding in IT security is where to start

Andy Tang

iTrader: (3)

Still can't sway you?

Thanks for the info to ponder!

Kieran_Burns

iTrader: (1)

I forgot to add: a complete inability to produce coherent documents. If the last PEN test we had run against our network is anything to go by.

Honestly - all this company did was run a bleeding script against the network and cut and paste the results with some truly poor 'comments' alongside them.

PEN tests against an Infrastructure should look at all aspects - did you hear about that American firm that left USB pens lying around the car park of the company they were paid to test?

The drives held software that communicated back to the testing company when plugged into a p.c. I'll leave you to guess the rest

stevem2k

I have a contact if you would like to sub it out Open to revenue sharing

Coffin Dodger

Sorry am I the only one who thinks the thread topic sounds a bit rude

I'll penetrate your network for you