this post was submitted on 05 Sep 2024
66 points (97.1% liked)

Cybersecurity - Memes

1948 readers
1 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
Sam1232188@lemmy.world
neurohost@lemmy.world
Sam1232188@lemmy.fmhy.ml
Alphadef@programming.dev
CannaVet@lemmy.world
66
Severity: Critical (feddit.org)
submitted 1 month ago by cron@feddit.org to c/cybersecuritymemes@lemmy.world
6 comments fedilink hide all child comments
 

I have both done pentests and received pentest reports. My observation is that the perceived severity often varies between the tester and the customer.

you are viewing a single comment's thread
view the rest of the comments
[–] mosiacmango@lemm.ee 5 points 1 month ago* (last edited 1 month ago)

Sometimes the law determines the risk. Any critical/highs in PCI will get you speed bagged, so you sort those either way.

Now, sometimes the sorting is "turn if off for the retest" which is just the business ignoring risk in a complicated way, but it still gets addressed in some way.