...Vlissidis said it is cause for concern. "It is a concern because the vulnerability should have been picked up in penetrationtests." Matt Hampton, at security firm Imerja said the hack only effected information in the browser and not confidential...
http://www.computerweekly.com/Articles/2009/07/30/237112/mi5-website-hacked.htm
...more to come. So what could have been done to prevent such breaches? Plenty, including ensuring that regular penetrationtests and information security audits are carried out of all in-house and outsourced services. That’s why we developed...
http://www.computerweekly.com/blogs/david_lacey/governance-issues/
...source code in isolation. Penetrationtests should then be used to seek...also known as ethical hacking, penetrationtests are proactive, authorised...least once per year. But penetrationtests have a lesser known benefit...
http://software.silicon.com/security/0,39024655,39420667,00.htm