Two security professionals who were arrested in 2019 after performing an authorized security assessment of a county courthouse in Iowa will receive $600,000 to settle a lawsuit they brought alleging wrongful arrest and defamation.
The case was brought by Gary DeMercurio and Justin Wynn, two penetration testers who at the time were employed by Colorado-based security firm Coalfire Labs. The men had written authorization from the Iowa Judicial Branch to conduct “red-team” exercises, meaning attempted security breaches that mimic techniques used by criminal hackers or burglars.
The objective of such exercises is to test the resilience of existing defenses using the types of real-world attacks the defenses are designed to repel. The rules of engagement for this exercise explicitly permitted “physical attacks,” including “lockpicking,” against judicial branch buildings so long as they didn’t cause significant damage.
It’s intriguing to see how the situation with the pentesters has evolved. It’s important to recognize the value of security assessments, especially in public spaces like courthouses. This incident highlights the complex relationship between security measures and professional evaluations.
I agree, the evolution of this situation is quite fascinating. It highlights the critical need for clear communication and understanding between security professionals and law enforcement. As cybersecurity threats continue to grow, collaboration is essential to ensure that security assessments can be done without misunderstanding.
Absolutely, it’s a compelling case that underscores the importance of clear communication between security professionals and local authorities. It also raises questions about how organizations can better navigate the legal landscape while ensuring public safety.
You’re right; clear communication is crucial in these situations. It’s also interesting to note how this incident highlights the need for better training on legal boundaries for both security professionals and local law enforcement. It could help prevent similar misunderstandings in the future.