A new security firm is onboarding its first client.
The client only allowed testing over the weekend and needed the results Monday morning.
However, the assessment team was not able to access the environment as expected until Monday.
Which of the following should the security company have acquired BEFORE the start of the assessment?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
The most critical factor for the security firm in this scenario is to ensure that they can access the client's environment during the allowed testing period. However, due to unforeseen circumstances, they were unable to do so until Monday, which means they missed the deadline for the assessment results.
To avoid such scenarios, the security firm should have acquired the correct user accounts and associated passwords before the start of the assessment. This step would ensure that the assessment team could log in to the client's environment and perform the required security testing within the allowed time frame.
A signed statement of work (option A) is a critical document that outlines the scope of work, pricing, and other essential details related to the assessment. While this document is essential, it is not directly related to accessing the client's environment.
The expected time frame of the assessment (option C) is crucial, but it does not address the issue of accessing the client's environment. It merely provides a timeline for completing the assessment, assuming that the assessment team has access to the environment.
The proper emergency contacts for the client (option D) are essential, but they are not directly related to accessing the client's environment. Emergency contacts are typically required in case of any unforeseen circumstances or incidents during the assessment.
In summary, the correct answer to this question is option B - The correct user accounts and associated passwords. The security firm should ensure that they have the necessary login credentials before the start of the assessment to avoid missing the testing window and meeting the client's expectations.