Case Project: Determining Legal Requirements for Penetration Testing

Alexander Rocco Corporation, a large real estate management company in Maui, Hawaii, has contracted your computer consulting company to perform a penetration test on its computer network. The company owns property that houses a five-star hotel, golf courses, tennis courts, and restaurants. Claudia Mae, the vice president, is your only contact at the company. To avoid under-mining the tests you're conducting, you won't be introduced to any IT staff or employees. Claudia wants to determine what you can find out about the company's network infrastructure, network topology, and any discovered vulnerabilities, without any assistance from her or company personnel.

Based on this information, write a report outlining the steps you should take before beginning penetration tests of the Alexander Rocco Corporation. Research the laws applying to the state where the company is located, and be sure to reference any federal laws that might apply to what you have been asked to do.

The rapidity of change in the IT field has a tendency to make the material in textbooks become dated fairly quickly. Because of this, you will be expected to research the latest information on the areas in the Case Projects using the Internet (not Wikipedia) and include that in your reports. As a consultant, you are supposed to be an expert in the area and should not require outside sources. You would not normally provide citations in these types of reports where you are the expert and you present your knowledge to the customer; however, for this class you are required to provide your references (in APA format) in an extra sheet on the end of your reports.

Formatting guidelines:

• Use letterhead paper (you may have to create your own) and do not mention the class or the professor or the school in your reports.

• Your report should be no less than one page and no more than four pages of typed material (not including the headings, any pictures or diagrams, etc.), unless the required page length is stated in the Case Project.

• Double-spaced and Times New Roman (12-point) font type.

• References are on an extra sheet at the end of the report and must be in APA format.

• Do not make reference to the class, Saint Leo University, the problem numbers, or your professor in your Case Project submissions.

• Each Case Project assignment is a stand-alone and should be in a separate file.