Ethical Hacking Agreement for External Network Security - Unannounced Penetration Test

Ethical hacking is obviously a very controversial area. The position of clients of the organization contracting for the security test whose personal data may be accessed has to be taken into consideration. Most ethical hackers are in the business of hacking for profit, an activity known as penetration testing, or pen testing for short. Pen testing is usually conducted by a security professional to identify security risks and vulnerabilities in systems and networks. The purpose of identifying risks and vulnerabilities is so that a countermeasure can be put in place and the risk mitigated to some degree. Additionally, state, country, or international laws must be understood and carefully considered prior to using hacking software and techniques.

This form is a generic example that may be referred to when preparing such a form for your particular state. It is for illustrative purposes only. Local laws should be consulted to determine any specific requirements for such a form in a particular jurisdiction.