The Importance of Pre-Assessment Measures
Question
A client wants a security assessment company to perform a penetration test against its hot site.
The purpose of the test is to determine the effectiveness of the defenses that protect against disruptions to business continuity.
Which of the following is the MOST important action to take before starting this type of assessment?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.C.
When performing a penetration test against a client's hot site, it is important to take certain actions before starting the assessment to ensure the success and efficiency of the project. Among the listed options, the MOST important action to take before starting the assessment is to ensure the client has signed the SOW (Statement of Work), option A.
The Statement of Work is a legal document that outlines the scope of the project, the timeline, the resources, and the responsibilities of each party involved in the project. It ensures that the client understands the scope and objectives of the project and agrees to the terms and conditions set forth by the security assessment company. By signing the SOW, the client acknowledges their responsibility and accountability for the results of the assessment.
Option B, verifying the client has granted network access to the hot site, is also an important step to take before starting the assessment. Without network access, the security assessment company would not be able to conduct a thorough and accurate assessment of the hot site's defenses.
Option C, determining if the failover environment relies on resources not owned by the client, is important to consider in the planning phase of the assessment. However, it is not the most crucial action to take before starting the assessment.
Option D, establishing communication and escalation procedures with the client, is also important to ensure that both parties are aware of how to communicate during the assessment and how to handle any issues that may arise. However, it is not the most important action to take before starting the assessment.
In conclusion, before starting a penetration test against a client's hot site, it is crucial to ensure the client has signed the SOW. This ensures that the client understands the scope and objectives of the project and agrees to the terms and conditions set forth by the security assessment company.
