1. Ask Permission
2. Define a scope for the demo and get all parties to agree on it.
3. Set boundaries and stay in those (VMs, test equipment)

Ensure that everything is documented and not word of mouth.

Sent from my iPhone

On Nov 24, 2012, at 10:02 AM, Jim Halfpenny <[email protected]> wrote:

> Seconded. I would steer well away from interfering with employee's personal 
> equipment entirely. Bringing a personal device to work does not implicitly 
> give me employer the right to interfere with it and you could find yourself 
> on thin ice.
> 
> Jim
> 
> On Nov 24, 2012 1:57 PM, "allison nixon" <[email protected]> wrote:
>> ask permission first.  
>> 
>> On Fri, Nov 23, 2012 at 3:41 PM, Jason Jarvis <[email protected]> wrote:
>>> All,
>>> 
>>> If I wanted to demonstrate real life attacks with my colleagues from a 
>>> security awareness perspective but also an educational one for the sales 
>>> team, what else should I put in place to protect the company and myself 
>>> on-top of gaining their permission and awareness of such tests?
>>> 
>>> For example I'd like to use Karmetasploit and their mobile devices that 
>>> they bring to the office.
>>> 
>>> Regards,
>>> 
>>> K41zen
>>> _______________________________________________
>>> Pauldotcom mailing list
>>> [email protected]
>>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
>>> Main Web Site: http://pauldotcom.com
>> 
>> 
>> 
>> -- 
>> _________________________________
>> Note to self: Pillage BEFORE burning.
>> 
>> _______________________________________________
>> Pauldotcom mailing list
>> [email protected]
>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
>> Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> [email protected]
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
[email protected]
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

Reply via email to