Comments on: Letter to the client http://topheavysecurity.com/2010/07/07/letter-to-the-client/ I am not the enemy, although I play one on TV Tue, 31 Jan 2012 23:11:02 +0000 hourly 1 http://wordpress.com/ By: Luza http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-16 Thu, 12 Aug 2010 15:02:11 +0000 http://diami03.wordpress.com/?p=9#comment-16 Interesting letter, it should be used in any security assessment as the first step to prepare the environment so the assessment can be a nice experience for both parties.

]]> By: Letter to the client « axpad http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-15 Fri, 16 Jul 2010 20:34:48 +0000 http://diami03.wordpress.com/?p=9#comment-15 [...] Letter to the client « Fear Not the Assessor [...]

]]> By: Network Security Blog » Network Security Podcast, Episode 205 http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-13 Wed, 14 Jul 2010 01:09:41 +0000 http://diami03.wordpress.com/?p=9#comment-13 [...] Letter to the client. [...]

]]> By: Network Security Blog » My “Letter to the Client” http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-11 Mon, 12 Jul 2010 14:08:38 +0000 http://diami03.wordpress.com/?p=9#comment-11 [...] of mine started a new blog, Fear Not the Assessor.  She started it off with an excellent post, Letter to the Client.  Almost every QSA goes into a new client with a certain sense of trepidation due to [...]

]]> By: Michael Knisely http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-10 Mon, 12 Jul 2010 03:43:25 +0000 http://diami03.wordpress.com/?p=9#comment-10 Great post. I look forward to more.

]]> By: Tim http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-9 Sat, 10 Jul 2010 17:23:58 +0000 http://diami03.wordpress.com/?p=9#comment-9 Great blog –

Very clear and precise – honesty is key and if they have known issues it is better to tell you then to have it become an public incident.

@ubuntumongol

]]> By: Aditya http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-8 Thu, 08 Jul 2010 08:09:04 +0000 http://diami03.wordpress.com/?p=9#comment-8 Good one,

Really liked it!

]]> By: bonarez http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-7 Wed, 07 Jul 2010 17:41:44 +0000 http://diami03.wordpress.com/?p=9#comment-7 Nice start indeed! I like your mindset.

One thing I would add. Always agree on the scope of your assessment before you dive in. As divers say: plan the dive, dive the plan!

]]> By: Kevin Riggins http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-6 Wed, 07 Jul 2010 17:26:08 +0000 http://diami03.wordpress.com/?p=9#comment-6 As I’ve tweeted and blogged, nice job! I look forward to what you bring us in the future.

Kevin (@kriggins)

]]> By: newfurniturey http://topheavysecurity.com/2010/07/07/letter-to-the-client/#comment-5 Wed, 07 Jul 2010 13:57:18 +0000 http://diami03.wordpress.com/?p=9#comment-5 Great start! It’s straight-forward, cuts out all of the in-between and gets right to what is needed. I definitely agree with each of the points you noted and though there is always room for “more” I think you listed the most important things that should be listed and should keep it “as is” – and should be a default letter that goes out to all clients.

~newfurniturey

]]>