Dress code

[rslade]

[CraginS]

1. That's funny.

2. Pants suits have cuffs; shoes have heels.

 3. Given the history of pen testing, the thought of insisting a pen tester wear a necktie or high heels in order to "look professional" is ludicrous. Do they have to cover their tattoos with bandages, too?

4. Licensing is normally a governmental function, manage by national or local government bodies and agencies, not by training or certification organizations. I was unaware, until I researched this text, that the EC Council has the audacity to label one of their training and skills verification programs a license in stead of a certification.

[CISOScott]

I would say the only time dress code is important for a pen tester is in the intro meeting and exit (debriefing) meeting. In between, meh. Really, if you already have someone dressed up then it would even be OK to downgrade to business casual (nice shirt with khakis, etc.)

Since they do most of their work with their fingers should manicures be added to that slide?

[Badfilemagic]

That's worth a laugh and a half right there. "I'm going to go dumpster-diving.  Luckily, my Brooks Brothers OCBD is wrinkle-free!" -- said no one ever. And this coming from someone who has a closet full of Brooks Brothers that, frankly, no one makes me wear to work.

[rslade]

> CraginS (Contributor III) posted a new reply in Career on 11-01-2018 10:30 AM in the (ISC)² Community :

> 1. That's funny.   2. Given the history of pen testing, the thought of
> insisting a pen tester wear a necktie or high heels in order to "look
> professional" is ludicrous.

I'm giving a conference presentation via Skype in a couple of hours. I may or
may not be wearing pants ....

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Jack shook his head and staggered backwards, his hand falling on
to the shaft of an axe that was resting in a block of wood. He
knew what had to be done. He hobbled into the shed, rummaged
under the broken wood and found his father's old chainsaw.
- `The Big Over Easy,' Jasper Fforde
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

[rslade]

> CISOScott (Advocate I) posted a new reply in Career on 11-01-2018 10:58 AM in the (ISC)² Community :

> I would say the only time dress code is important for a pen tester is in the
> intro meeting and exit (debriefing) meeting. In between, meh. Really, if you
> already have someone dressed up then it would even be OK to downgrade to
> business casual (nice shirt with khakis, etc.)

One time I went to the first day of a contract and Gloria asked why I wasn't
wearing a tie. I said that in this job I was mostly managing a hard core tech
group, and if I showed up wearing a tie it would scare them ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Have no fear of perfection: you'll never reach it. - Salvador Dali
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

[rslade]

> Badfilemagic (Contributor II) posted a new reply in Career on 11-01-2018 11:33 AM in the (ISC)² Community :

>  And this coming from someone who has a closet full of
> Brooks Brothers that, frankly, no one makes me wear to work.

One of the law firms I consult for demanded that I show up in a suit when the opposition demanded that I show up in court to ... well, I really don't know why they wanted me there.

I had to go buy one ...

[Shannon]

Reminds me of a service provider's ad I saw sometime back. It looked like a great offer, with the truth in very fine print.  

In this case, that part might be worded like this...

1. If unable to demonstrate proficiency that matches your credibility, you may have to discard the attire --- either on-site or off-site.

2. Immediate success with a pen, paper & notepad is dependent on your client experiencing total system and network unavailability during your visit.

[emb021]

As a security consultant, I am expected to dress nicer then my clients.  For initial meetings I am at least in a dress shirt and sports coat.  For some clients, I would wear a suit and tie.

When I am working at our office or at home, well, I prefer more business casual, which for me are slacks and a polo shirt or similar shirt.

Am sure the purpose of this is to ensure that pen testers, who often times are working remotely, that they need to dress professionally when they are meeting with their clients.

[Shannon]

@emb021 wrote:

Am sure the purpose of this is to ensure that pen testers, who often times are working remotely, that they need to dress professionally when they are meeting with their clients.

---

No doubt the impression made by the way we carry & portray ourselves is important, but it seemed to have been a bit over-emphasized there, hence the banter...