Great feedback. Will flesh out the team section. You're right on the customer feedback section that there may be a huge disconnect between customer and vendor

Great feedback. Will flesh out the team section. You're right on the customer feedback section that there may be a huge disconnect between customer and vendor perception. We will likely have to get in the middle of that in certain situations to ensure feedback is fair and accurate. There is some movement on standardization of reporting e.g. Now a 43 page document from the PCI council on how to do the pen test. On your personal peeve: I hear you. That why I tried to define pen-testing for what it means to me. There's tons of other definitions out there and many are prejudicial to scope and quality.