As a security professional or penetration tester, it's often our "job" to break things, but what is absolutely essential is that we get the permission to break things. There are different pain points for organizations, and it's essential to get the buy-in from senior management to be able to have a productive exercise. We'll discuss how to get the permission from senior management.

By day, directing an Information Security Program at a financial services institution. By night, adjunct faculty, teaching Health IT. Over 20 years of security experience, 25 overall in IT. I've worked both internally as well as a third-party consultant.

Recorded at BSides Philly 2016