06-13-2013, 09:36 PM
For those of you performing password audits for clients. What do your contracts for service look like? Our legal counsel is having an issue with us providing this service due to "privacy" issues. I think they are mostly worried about what would happen if the information got out post audit. Not by fault of our own, but by someone placing blame because they were aware of the audit. Any comments are appreciated.