Archived Does Target do pentesting?

[Blood Moon]

Just curious if anyone knows whether Target performs (or contracts out to have performed) any sort of IT penetration testing. I expect they have to, especially after the 2013 data breach. Anyone have any specific knowledge (or reasonable theories)?

 

[Hardlinesmaster]

Good chance they do.

 

[mrknownothing]

@OtherGuy, @UIguy, or @Sarakiel - do any of you know anything about this?

 

[Jack of all Workcenters]

No idea on the penetration testing, we get phishing emails though.

 

[Hardlinesmaster]

Here is an article about the data breach court case on prevention that spot lost on.
http://www.itbusinessedge.com/blogs...ound-negligent-in-data-breach-prevention.html
Federal concerns
https://fas.org/sgp/crs/misc/R43496.pdf
Spot missed opps on prevention:
http://www.sans.org/reading-room/wh...itical-controls-prevented-target-breach-35412