If we can handle the internal network scan and penetration testing on our own, why would we hire Redspin to perform it for us?
Some organizations may not have the knowledge or resources necessary to perform their own internal network scans or penetration tests. Also, in the event that a merchant/service provider is forced to prove their compliance to the PCI DSS, either because they are a level 1 merchant or following a data compromise, the scope and quality of the PCI scan and PCI penetration test may come under scrutiny. Redspin will perform a high-quality PCI penetration test that will withstand scrutiny by credit card issuers and QSAs auditing an organizations compliance.
