White hat hacking & security break-in testing & ethics

A recent incident occurred in central Iowa where security vendor, Coalfire, employees were arrested for breaking/entering and robbery of a county government building. After the arrest it was determined this was part of a contract the vendor had with a Federal agency in a neighboring county. This incident brought a wide range of online discussions about white hat hacking, facility break-in tests, and associated responsibilities and related ethical considerations.

• What are some lessons from the Coalfire security vendor arrests?
• What are some recommendations for contracting an outside entity to perform hacking and/or break-in activities?
• What activities need to be confirmed for such activities?
• What should related contracts contain for such activities?

Tune in to hear Rebecca discuss these topics and more with Dr. Mich Kabay.