Case Projects

Case Project $1-1$: Determining Legal Requirements for Penetration Testing

Time Required: $45$ minutes

Objective: Identify state and federal laws related to computer crime and apply this knowledge to create a preliminary penetration test advisory report.

Description: Alexander Rocco Corporation, a large real estate management company in Maui, Hawaii, has contracted your computer consulting company to perform a penetration test on its computer network. The company owns property that houses a five$-$star hotel, golf courses, tennis courts, and restaurants. Melinda May, the vice president, is your only contact at the company. To avoid undermining the tests you're conducting, you won't be introduced to any IT staff or employees. Melinda wants to determine what you can find out about the company's network infrastructure, network topology, and any discovered vulnerabilities without any assistance from her or company personnel.

Based on this information, write a report outlining the steps you should take before beginning penetration tests of the Alexander Rocco Corporation. Research the laws applying to the state where the company is located, and be sure to reference any federal laws that might apply to what you have been asked to do$.$