Re: Penetration Test Disclaimer?

From: miguel.dilaj@pharma.novartis.com
Date: Wed Jan 12 2005 - 13:19:16 EST

• Next message: Todd Towles: "RE: Google Hacking"
• Previous message: Da Llorxillo: "Re: Google Hacking"
• Maybe in reply to: Nicholas Fanelli: "Penetration Test Disclaimer?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi Nicholas,

There're many sources. One of them is the Information Security Systems
Assessment Framework (ISSAF), available at:

        http://www.oissg.org/issaf

(page 1036 in draft 0.1 is a template for a security assessment contract).

The template for the Non Disclosure Agreement (page 1035 in draft 0.1) was
dropped to be reworked, but if you need it feel free to email me directly.
Kind regards,

Miguel Dilaj (Nekromancer)
Vice-President of IT Security Research, OISSG

Nicholas Fanelli <nfanelli@empire.edu>
12/01/2005 15:02

 
        To: pen-test@securityfocus.com
        cc: (bcc: Miguel Dilaj/PH/Novartis)
        Subject: Penetration Test Disclaimer?

Hello,

Can someone please direct me to where I could find documentation or a
template for a security audit contract/disclaimer.

Any help is appreciated!

-Nicholas

• Next message: Todd Towles: "RE: Google Hacking"
• Previous message: Da Llorxillo: "Re: Google Hacking"
• Maybe in reply to: Nicholas Fanelli: "Penetration Test Disclaimer?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:13 EDT