Hello guys,

I am working in a security company that provides professional services in Quebec, Canada. Besides other services, we are doing penetration testing, and soon we will provide other services (as monitoring, vulnerability scanning & others).

My question is if you consider (given your personal experience or known from close contacts) that it is a good thing to became ASV (and if it is profitable, not a hole in the budget).

Also, I would like to convince my boss to became QSA (and I would like to be one of them). Do you have any idea if > 20.000$ / Yr invested in this is a gain or loss for a company.

I hope that you understand my dilemma and I am waiting for your answers.

Thank you!