Pre-Attack Phase: Contracts

Question 1

Video’s header:

Answer 1

A penetration testing contract together with the nondisclosure agreement should be signed. The contract should include all information and requirements that the penetration tester needs.

Question 2

Important notes:

Answer 2

• details of liabilities’ll be held within your penetration testing contract. If you ever accidentally cause harm to a system that you’ve been commissioned to perform a penetration test on, you’ll likely be sued and charged the value of the damages. Be careful out there, lil’ tots.
  Have a really good lawyer go over these things and make certain that you understand all that’s required and requested of you.
• Do NOT fall out of alignment with any contracts you’ve signed. If you’ve signed a nondisclosure agreement that states you can not disclose information to any 3rd parties outside of the organization that’s signed you on, that means not your spouse, not your children, not your genetically fallible progerian mutant of a house-cat, not ANYONE outside of the defined first party. You’re in the mafia now you incessant ape, we’ll cut you’re dang hands off.