External penetration tests MUST include:
use of consultants to ensure completeness.
communications to users of the target systems.
changes to target data to prove the attack was successful.
advance approval from system owners.
Submit