Answer:
For the most part, you have to rely upon the experience and expertise of the intrusion test provider, unless you have sufficient knowledge about the process to double-check.
Find out from the intrusion test provider what they did and how they did it. Have them explain their methodology, as well as the results.
The most important thing, however, is to do thorough due diligence up front so that you are certain the service provider you choose is competent and knowledgeable.
First published on BankersOnline.com 10/7/02
print
share