The CISO for an Organization Has Called Penetration Testers That

The CISO for an organization has called penetration testers that she met at an information security conference a few months ago. The penetration testers come to the office for a meeting and describe the process of how the test would proceed. The testers explain that before they can get started, they need written authorization from the company. Which of the following would outline the authorization, scope, and timing necessary for the penetration testers to begin?

A) NDA
B) Risk matrix
C) SLA
D) Rules for engagement

Correct Answer:

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Access For Free