Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
Demonstrating ROI for Penetration Testing (Part Three)
Marcia Wilson
Comments
Mode:
Threaded
Flat
Expand all
|
Post comment
Demonstrating ROI for Penetration Testing (Part Three)
2006-03-08
Craig S Wright
Rather simplistic. Qualative risk methods fail to cover the real costs and have an emotive component.
The ROI is further compromised as the value of a "good" audit vs a "good" pen.test is not considered.
Craig
[ reply ]
Link to this comment:
http://www.securityfocus.com/comments/infocus/1730/429#429
Privacy Statement
Copyright 2009, SecurityFocus
The ROI is further compromised as the value of a "good" audit vs a "good" pen.test is not considered.
Craig
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/infocus/1730/429#429