Category Archives: Contracts & Agreements

Another Penetration Testing Pen Test Agreement MOA MOU Contract Document

Penetration Testing Agreement – Download a formatted PDF at the bottom This document serves to acknowledge an engagement between the Business Owner and Data Custodian (see descriptions page 2), collectively of the following system(s) or application, the University Chief Information Officer, and the University IT Security Officer. Systems(s) to be tested: _______________________________________________________________ Testing Time Frame:… Read More »

Share Button

Official Penetration Testing Agreement Pen Test Contract

  Penetration Testing Agreement – Download corrected formatted word document at the bottom The below text is a sample contract only and does not obligate COMPUTERSECURITY.ORG to perform services under any specified terms or conditions. This contract is for educational purposes only. Only valid signed contracts will be considered binding. This contract is between COMPUTERSECURITY.ORG… Read More »

Share Button

Penetration Testing Scope Scoping Worksheet Agreement Contract

Scope Worksheet:   What are the target organization’s biggest security concerns: (Examples include disclosure of sensitive information, interruption of production processing, embarrassment due to website defacement, etc.)   _______________________________________________________________________   _______________________________________________________________________   _______________________________________________________________________   _______________________________________________________________________     What specific hosts, network address ranges, or applications should be tested:   _______________________________________________________________________   _______________________________________________________________________   _______________________________________________________________________  … Read More »

Share Button

Penetration Testing Team Rules of Engagement Worksheet

Rules of Engagement Worksheet:   Penetration Testing Team Contact Information:   Primary Contact:  ____________________________________________   Mobile Phone:      ____________________________________________   Pager:                   ____________________________________________   Secondary Contact:   _______________________________________________   Mobile Phone:          _______________________________________________   Pager:                       ________________________________________________   Target Organization Contact Information:   Primary Contact:  ____________________________________________   Mobile Phone:      ____________________________________________   Pager:                   ____________________________________________   Secondary Contact:   _______________________________________________   Mobile Phone:         … Read More »

Share Button

Penetration Testing Pre-Engagement Contract Rules for Attack

I am not sure who to give to give credit for this, it was passed down to me some time ago.   This is a Pre-Engagement Contract that needs to be reviewed before an actual penetration test to lay out the scope and guidelines   Scoping Scoping is arguably one of the more important and… Read More »

Share Button