‘Hi, Felix, I’m sitting in.’ The man frowned at Harry as he pulled up a chair.
Her cheeks tingled under his gaze. What was up with these guys? She squared her shoulders and stood up.
‘Harry Martinez.’ She held out her hand.
His brow cleared and he grinned. ‘Sorry, I was expecting a man. Probably happens all the time, right?’ He returned her handshake. ‘Jude Tiernan. I’m an investment banker here.’
His hand was warm and his citrus aftershave perked up the room. What was an investment banker doing at an IT meeting? Then she remembered Felix’s barbed comment about M&A deals.
‘Let me guess,’ she said. ‘You work for M&A?’
‘Let’s say M&A work for me.’
Harry sank back down and worked it out. So he was Head of M&A, just like her father had been. One man’s prison sentence was another man’s career break. She felt their eyes on her, invading her. Her father was a legend in this bank. Had they made the connection and come to look her over? She chewed her lip, unable to meet their gaze.
Jude set his mobile phone on the desk and took a silver pen from his breast pocket. He twirled it between the fingers of one hand and gestured towards Harry with the other. ‘Please continue.’
‘I was really expecting someone from IT Security to be here,’ said Harry. ‘Someone who knows the systems.’
Felix snorted. ‘IT Security. I know these systems better than anyone. I practically built the damn machines myself.’
‘I see.’ Harry checked the card again. ‘And now you’re in IT Procurement?’
He glared at her. ‘The career move came up. Security were more than happy to let me handle this initial meeting, believe me. Saves them the trouble.’
Harry took a deep breath. She looked at her pad, although she’d written nothing down.
‘Okay, well, I don’t know how much Dillon covered with you on this,’ she said. Not much, from the looks of things. ‘We need to scope the penetration test, see which approach suits you best.’
Know the players at the table, her father had taught her. Adjust your style accordingly. Trouble was, she didn’t know these guys at all, and they weren’t giving her any clues.
‘A pen test is a waste of time,’ said Felix. ‘Our systems are secure, I can personally guarantee it.’ He glowered at Harry. ‘Anyone who says otherwise is challenging my professional competence.’
Jude ignored him. ‘What exactly happens in this pen test, Ms Martinez?’
Felix sighed. ‘Ah, come on, Jude, I’ve been through this with her already. Besides, we both know she’s only here because her boss is an old friend of yours and he wants the account.’
Harry looked back down at her pad. No wonder she was being fobbed off with someone from Procurement. They weren’t even serious about the business.
Jude raised a hand to shut Felix up and smiled at Harry. ‘Humour me. Tell me about this pen test.’
Harry suspected he was conducting some test of his own. She didn’t smile back.
‘A penetration test is when I use every dirty trick in the book to try and break into your computer systems,’ she said. ‘And once I’m in, I sniff around to see what kind of damage I can do.’
Jude stopped twirling his pen. ‘In other words, you pretend to be a hacker.’
‘Right.’
Felix leaned forward. ‘And just what kind of hacker are you, Ms Martinez? A black hat or a white hat?’
Harry stiffened, and glared at him.
Jude looked from one to the other. ‘Anyone care to fill me in?’
Harry cut in before Felix could take another swipe at her. ‘Black hats are malicious hackers intent on causing damage. White hats aren’t destructive. They’re only interested in the technology and how far they can push it.’
She turned to Felix. ‘To answer your question, Mr Roche, I’m a security professional, not a hacker.’
‘Well, well, a hacker with ethics,’ Felix said. ‘Who’d have thought it?’
Jude scribbled something on his pad and shoved it across to Felix. Harry watched Felix’s jaw tighten as he read the note, and she wondered if she’d passed the test.
‘I’m intrigued,’ Jude said. ‘So how do we do this?’
‘For a straight pen test, we can either do it as a black-box or a white-box scenario.’
‘Everything’s black and white with you, isn’t it?’
Harry looked him in the eye. ‘Pretty much.’
He raised his eyebrows. ‘Okay, I’m listening.’
‘Black-box testing is the closest thing to a real hack from the outside. I start with nothing except your corporate name. I use outside sources of information to snoop around your network, and then I break in.’
She paused to make sure he was getting it. He nodded and smiled.
‘For a white-box test, I know everything about your internal systems right from the start. Your firewalls, your network infrastructure, your databases, the works,’ Harry said. ‘In other words, I’m attacking from the inside.’
The door creaked opened and a man in his late fifties eased into the room. His grey hair fluffed out like a pair of wings on his balding head.
Coco the Clown, Harry thought.
‘Please carry on,’ the newcomer said and slid into a chair against the wall behind Harry.
God, how many more people were coming to gawp at her? She eyed up the conference table that could seat twenty people and feared the worst.
Jude watched the older man for a moment. Then he turned his attention back to Harry. ‘So which approach would you recommend, Ms Martinez?’
Harry tried to concentrate. ‘White box. In my experience, insiders are far more of a threat than external attackers.’
‘And I guess you’d know all about insiders, wouldn’t you?’ Felix said.
Every muscle in her body went still. ‘Just what are you getting at, Mr Roche?’
‘Come on, let’s put it on the table here. We’re all thinking it.’ He spread his arms as though the whole room was full of people on his side. ‘Your daddy was the master of all insiders, wasn’t he?’
Harry blinked. Then she dropped her gaze and fiddled with her pad, willing her voice to be steady. ‘What my father may have done is not part of this discussion.’
‘May have done?’ Felix said. ‘He was found guilty of insider trading, wasn’t he? Put away for eight years.’
Harry took in his clenched fists and the angry splotches on his cheeks. She stared at him. ‘You’re taking it all rather personally, aren’t you?’
‘Damn right, I am. Salvador Martinez nearly brought this company to its knees.’
‘Felix, you’re out of order.’ Coco the Clown’s voice behind her made her jump.
Jude shifted in his chair. Felix glared at Harry; it looked as if he had more to say.
Harry didn’t bother turning to acknowledge the unexpected support. To hell with it. She’d had enough. She placed her palms on the lacquered boardroom table. It was smooth and cold, like a mirror. She pushed herself up and stood to face them.
‘Mr Roche, I came here to talk about the security of your IT systems, and that’s all I’m prepared