From: Tonnerre Lombard (tonnerre.lombardsygroup.ch)
Date: Wed Jul 22 2009 - 06:49:15 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Salut, Erin,

On Fri, Jul 17, 2009 at 04:47:41PM -0700, Erin Carroll wrote:
> The recent thread from Adriel on verifying your security providers jogged a
> thought that's been at the back of my mind for a bit: Have you ever worked
> or collaborated with another pen-test company on projects? How did it work
> out? What prompted the collaboration effort? How did you manage the
> relationship with "the competition" and was it a successful engagement
> (financial or otherwise)? How did you find/choose who to work with?

Well, one time when a customer wanted an application which required a very
high level of securing they actually went as far as to order two companies
(us and The Others™) to take care of it. Initially, we were both not too
thrilled.

As it turned out though, we were the crypto freaks and had a strong grasp
on technical security while the other company was focussing mainly on
organizational security, so we let them take care of that part of the job
and hacked away peacefully.

(But usually companies just want one "security provider".)

Kind regards,

                                Tonnerre
--
SyGroup GmbH
Tonnerre Lombard

Solutions Systematiques
Tel:+41 61 333 80 33 Güterstrasse 86
Fax:+41 61 383 14 67 4053 Basel
Web:www.sygroup.ch tonnerre.lombardsygroup.ch

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
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=YEVX
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]