This is why you have explicit language in your documents. It's not there for when things go well - it's when things go bad like this situation.
This a thousand time! Put another way (via one of my lawyers): Contracts are for all times when you aren't happy with each other.
In fact, I argue this is an expected outcome. How can you run a security contract that does explicitly illegal things w/o having clear language about what is supposed to happen.
Completely agree. I would never send a pen-test team/red team/whatever into an engagement without a detailed rules of engagement, an escalation path and a get-out-of-jail-free proviso. A bit crazy these folks didn't pay attention to the details.
Comments
This is why you have explicit language in your documents. It's not there for when things go well - it's when things go bad like this situation.
This a thousand time! Put another way (via one of my lawyers): Contracts are for all times when you aren't happy with each other.
In fact, I argue this is an expected outcome. How can you run a security contract that does explicitly illegal things w/o having clear language about what is supposed to happen.
Completely agree. I would never send a pen-test team/red team/whatever into an engagement without a detailed rules of engagement, an escalation path and a get-out-of-jail-free proviso. A bit crazy these folks didn't pay attention to the details.