Re: Penetration Testing

[Willis Marti <wmarti () TAMU EDU>]

Do you actually mean "penetration testing" or do you really
want a vulnerability assessment? Or just an external vulnerability scan?
LOTS of folk will do a Nessus-like scan, possibly rating the vulnerabilities
high/medium/low, but very few will go further and say "your security
status is passing/failing".
 I don't think "zero defects" is reasonable for higher ed; we're not a bank or
military facility. Our job is to distribute information.
So what do you really want?

----- Original Message -----
> Does anyone have any recommendations for companies that do
> penetration testing? We are considering bringing in an outside company to do
> penetration testing on Lehigh's systems and network and would like someone with
> experience in the higher ed domain. Reply here or off-line if you prefer.

-- 
Willis Marti
Director and CISO
Networking and Information Security
Texas A&M University