Your Security Is ALWAYS in Scope, Part 1 - Joseph Kirkpatrick - SCW #80

<p>Our client was using a hosted service to perform remote monitoring and management and resisted its inclusion in the audit scope. The vendor's external scans revealed critical vulnerabilities. Prior to a highly-publicized breach, the vendor said no auditor had ever included their service in the scope of their audits. We will explore attitudes that keep critical security controls out of scope.</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/scw">https://www.securityweekly.com/scw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/scw80">https://securityweekly.com/scw80</a></p>