CSC V7 control 20.8 – Control and Monitor Accounts Associated with Penetration Testing Overview CSC V7 control 20.8 recommends that organisations “Any user or system accounts used to perform penetration testing should be...