SHARE
Are there perils in penetration testing?
By John Pulley
Excerpt:
"Allowing a consultant to hack into your system and see sensitive data in the name of security makes no sense to James MacDougall, chief information security officer of South Carolina, which uses CORE IMPACT for in-house penetration testing.
"’We have outsourced some penetration testing, but I didn't think it was wise to outsource the testing of critical infrastructure to a vendor,’ MacDougall said. ‘We thought we should arm ourselves.’"
Source: FCW.com
