This is your early warning system

摘要

Pentestingand vulnerability assessments are essentials. But how often and when these checks are made varies from one company to the next, as Marcia Savage found out. Vulnerability assessments, penetration testing and risk assessments are all key parts of an information security program. But how often should these tests be done? Is it better to do them in-house or bring in a consultant? And what should be done with all the data gleaned from these assessments? There are no cut-and-dried answers to those questions - one size does not fit all when it comes to assessing vulnerabilities and risk, and performing pen tests. The approach a company takes usually depends on its size, amount of in-house expertise, and individual business needs.