ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ115

VerifiedPenetration Testing Scoping and Engagement Methodology

Joe is an engagement team lead at Xsecurity Inc. His penetration-testing team follows all standard pentesting procedures; however, a team member inadvertently deletes a document containing the client’s sensitive information. The client is suing Xsecurity for damages.

Which part of the Penetration Testing Contract should Joe have drafted better to prevent this lawsuit?

Explanation

An indemnification clause defines how liability, claims, losses, and damages arising from the penetration-testing engagement are allocated between the parties. It is the contractual provision that can protect the testing company or limit its exposure when an accidental action during the engagement causes client harm.

Community Discussion

No comments yet. Be the first to start the discussion!