Getting the most out of penetration testing

To make sure you're getting qualified penetration testing--an important step in ensuring technical compliance and excellent security practices--be certain that you know what you want from the process. How much should the consultant know about your business in order to make sure that appropriate testing is completed? Do you require a consultant to do a full port scan, or is a quick port scan acceptable? What is the consultant's testing methodology, and do you agree with it? Has the consultant passed an independent penetration testing assessment? Also, take the time up front to determine that the consultant's skillset is acceptable. Finally, insist on a full written report at the completion of testing.

Learn how to get the most out of penetration testing:
- read the article at IT Observer