A penetration testing company is about to engage with a new client. Which of the following should the penetration testers ensure is in place before initiating any security assessment activities?
The correct answer is 'A signed non-disclosure agreement (NDA)'. An NDA is a legal contract that outlines confidential material, knowledge, or information that the parties wish to share with one another for certain purposes, but wish to restrict access to or by third parties. Penetration testers must ensure that an NDA is signed before proceeding with their assessments to protect both their own legal interests and those of the client. It sets clear boundaries on what information can be shared and helps maintain the integrity and confidentiality of both parties involved in the testing process. The Time of engagement and Risk assessment report are parts of later stages in the engagement process and do not usually have the confidentiality clauses typically included within an NDA.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What exactly does a Non-Disclosure Agreement (NDA) cover?
Open an interactive chat with Bash
Why is an NDA important before starting a penetration test?
Open an interactive chat with Bash
What are the potential consequences of not having an NDA in place?