Laws and ethics.
So we get to legal issues that surround information security, certainly not a new topic.
All parties of the security community actually try to find the right balance of privacy, confidentiality,
as well as accountability for information security.
As far as I know, the laws still have problems in order to well, how do you handle information security
problems properly?
So due to the nature of the computer system, it's just not easy to identify cyber crimes and what laws
they should be subject to.
So this is one of the biggest problems of how to attribute cybercrime.
So, of course, that makes it also difficult to differentiate between a crime and ethical hacking activity.
Oh, now you're listening.
Penetration testing can cause some confidentiality and integrity issues.
Of course, it's possible, especially while testing business critical applications.
Shutting down a service may cause huge amounts of concern.
So therefore, it really is important to realize exactly what your obligations are.
Now, as one might expect, a penetration test has some pretty significant legal issues.
So at that point, the main thing here is what separates a penetration tester from a hacker?
Well, not much.
In fact, it's called permission.
So it's expected to have permission from the owner of this system that's going to be tested.
So that means that a legal agreement is not only beneficial for both parties, but I would say absolutely
essential.
So considering the respective laws, a written agreement between a tester and a company or organization
or individual can clarify all the points regarding the conducted activity on the system.
So here's a good thing to keep in mind that the laws and regulations change from country to country.
So before diving into a pen test, discuss with the legal department about the laws of your respective
country.
On the other hand, you can't solve everything with laws.
There are many gray areas in information security.
So sometimes you cannot necessarily cover the gray area by being legally blind, so that's why honesty
and responsibility come forward.
Out in the field, we call it the code of ethics.