Pentest Program Quality
How can you get the best security testing? If you're regularly consuming security testing services from one or more vendors, there are many things you can do to make sure you are getting the best test results on an ongoing basis. Phil will go over quality management techniques gleaned from decades of working with the most mature pentesting programs in the world.
Phil Brass moved to Atlanta in 1998 to work for Internet Security Systems, and has been a member of the security community ever since. He started doing network penetration testing and application security assessments in 2002, and has been in adversarial security consulting since then. He is currently Vice President of Professional Services at DirectDefense, where he oversees nearly 50 consultants doing appsec, netpen, PCI and OT/SCADA assessment work. In his spare time he likes to hike in the Cohutta wilderness, row on the Chattahoochee, play pickleball, and do CTFs with the DeepThonts CTF team.