Business justification for pentesting

From: sectraq@gmail.com
Date: Tue Aug 30 2005 - 12:29:35 EDT


('binary' encoding is not supported, stored as-is) hi all,

a few classic question that i would appriciate any answers for.
1- i would like to briefly know how to quantify information assets. In other words, i hear a pentester say: if a hacker breaks in ur network, u will loose up to 40000$ for example. how can he come up with such figures?

2- are there any other means to justify pentesting for management except for $$$?

3- are there any official statistics, figures etc. for justifying pentesting. ther more official it is the better.

4- any other information you guys might find helpful in justifying a pentest would be appriciated.

thnx in advance for ur help.

T.N
 



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:48 EDT