Re:Flush times for hackers in booming cyber security job market
by vinceguidry on Friday July 28, 2017 @08:56AM
(#14873883)
Sounds like a missed opportunity to at least get a referral fee for resolution.
[ Parent
| on HN ]
Re:Flush times for hackers in booming cyber security job market
by jacquesm on Friday July 28, 2017 @10:14AM
(#14874382)
Conflict of interest.
Re:Flush times for hackers in booming cyber security job market
by MichaelBurge on Friday July 28, 2017 @10:58AM
(#14874699)
Assuming the company is voluntarily hiring them, and not being required by a contract or law that needs an independent 3rd party for auditing purposes, it seems like the pentesting company would do an even better job on the inspection if they had a good chance of getting repair work down the line for every issue they found.
If they make up a bunch of minor things that don't matter, you can ignore those and focus on the important ones. I suppose if you don't have any in-house expertise at all to evaluate what they say, the conflict would be more important?
Re:Flush times for hackers in booming cyber security job market
by jacquesm on Friday July 28, 2017 @11:15AM
(#14874823)
It's simply bad practice to have the people that are involved in the 'checking' making money or being involved in the 'fixing' in any way shape or form.
You'll see this in almost every situation that is somehow related to auditing.