5 ms·
If you think about not having security clearance, it makes sense. You'd usually have clearance to see certain data. By not requiring it, you're replicating how
by milge 11y ago
If you think about not having security clearance, it makes sense. You'd usually have clearance to see certain data. By not requiring it, you're replicating how anyone else would try breaking into secure systems.
- vonmoltke 11y agoThe way most agencies work, the vulnerabilities would be considered classified information. So, the testers would not have access to classified information prior to the evaluation, but what they find during the evaluation would become classified.
- rdl 11y agoThere are plenty of cases of working on unclassified systems in classified environments where you need a clearance primarily to get to the point of doing your work. Less true as a contractor building products, less true in the US vs. deployed.