14.3.3 Supervision and Governance

In the previous sections, we discussed ethical dilemmas in the realm of penetration testing. How can service providers ensure that they act in a responsible fashion?

First, penetration testing providers and their employees are in a powerful position because of significant information asymmetry. Only the testers know the full truth. Their employer and the client have to trust them to report a...