Timeline for How often should one order a pentest?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 18 at 10:59 | history | edited | schroeder♦ | CC BY-SA 4.0 |
deleted 12 characters in body
|
| Apr 18 at 10:58 | comment | added | schroeder♦ | "How often should you schedule an internal AD password audit?" is a fundamentally different question (and answer) to "how often should you schedule a pentest?" Hence, there is confusion or your question is not properly defined. There could not possibly be an answer to what you asked in a standard because you are not defining "pentest". There can't be "explicit recommendations" in standards for something not explicitly defined. If you had asked about the frequency of an external pentest, there are answers to that in standards. | |
| Apr 18 at 9:57 | vote | accept | Falquiero | ||
| Apr 18 at 9:54 | comment | added | Falquiero | I used to be a pentester and agree that audit and pentest are two different concept but one could argue that a pentest can be considered an audit still (at least in my native language). I could have simply stated "testing" but it would have put a weird title. I am not mixing anything and am pretty sure that my post was perfectly understandable even with this "shortcut". | |
| Apr 18 at 9:21 | answer | added | schroeder♦ | timeline score: 4 | |
| Apr 18 at 9:14 | comment | added | schroeder♦ | Pentests are not audits. Social engineering is not a pentest. Password cracking audits are not a pentest. You are mixing audits, pentests, assessments into a single concept, and that will make it even more difficult to answer than it already is. | |
| S Apr 18 at 8:37 | review | First questions | |||
| Apr 18 at 9:57 | |||||
| S Apr 18 at 8:37 | history | asked | Falquiero | CC BY-SA 4.0 |