15B - Vendor Management Concepts

Question 1

What are Rules of Engagement ?

Answer 1

A definition of how a pen test will be executed and what constraints will be in place. This provides the pen tester with guidelines to consult as they conduct their tests so that they don’t have to constantly ask management for permission to do something. They establish clear guidelines for the vendor’s behavior, activities, and access to sensitive information.