54 ◾ The Security Risk Assessment Handbook
© 2011 by Taylor & Francis Group, LLC
Fly-By-Nite Security performs its research, it nds www.xyz-org.com and
www.xyz_co.com. When performing the security testing of these Web sites,
Fly-By-Nite unknowingly performs security testing on both the XYZ orga-
nization (www.xyz.com) and the unrelated XYZ Manufacturing Company
(www.xyz_co.com). Depending on the level of testing performed, Fly-By-
Nite could end up on the wrong end of a lawsuit or criminal prosecution.
Example 2: Take Out the Trash—Fly-By-Nite Security is again hired by the
XYZ organization, but this time to perform a security risk assessment at their
physical location. e project manager believed that the assessment would
cover only the ...