QuestionQ6

VerifiedPenetration Testing Essential Concepts

Irin has newly joined XYZ Ltd. as a penetration tester. As part of her onboarding training, her trainer instructed her on various legal policies and information security acts. During the training, she learned of a specific information security act concerning conduct and activities such as the following:

  • Performing DoS attacks on any websites or applications is illegal.
  • Supplying and owning hacking tools is illegal.
  • Accessing unauthorized computer material is illegal.

Which type of information security act best applies to the above conduct and activities?

Explanation

The Police and Justice Act 2006 strengthened UK computer-misuse law by amending the Computer Misuse Act 1990. Its computer-misuse provisions address unauthorised access to computer material, unauthorised acts intended or likely to impair computer operation—covering denial-of-service attacks—and making, supplying, or obtaining tools for computer-misuse offences.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!