Re: Penetration Testing Scheduling

["arvind doraiswamy" <arvind.doraiswamy () gmail com>]

Hey Yousif,
Thats quite strange actually. Why wouldn't you tell them the time? You
have to give them time to get ready , inform various teams to not
panic if they see scans and all that stuff. An approximate starting
date should be good enough; like 30th April 2008. Doesn't need to be
30th April 2008 - 12:00:09:87:675microseconds :)

Cheers
Arvind

On Sun, Apr 27, 2008 at 1:28 AM,  <Yousif () vapt-sec com> wrote:
> I've heard a lot of folks say that telling your customers exactly when you will begin the testing is  not suitable, 
> but I'm not sure as to why they that... Can anyone define for me the right approach? -- Do you plan the assessment 
> and let them know it's within a week or so, or do you simply inform them the date and time specifically?
>
>  ------------------------------------------------------------------------
>  This list is sponsored by: Cenzic
>
>  Need to secure your web apps NOW?
>  Cenzic finds more, "real" vulnerabilities fast.
>  Click to try it, buy it or download a solution FREE today!
>
>  http://www.cenzic.com/downloads
>  ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------