One of the key issues information security managers face is preventing hackers from accessing the organization's information technologies. Knowing the difference between black hat and white hat testing is fundamental in this role. As an experienced information security manager, you should be able to easily answer this question. You should also be prepared for a follow-up question from the interviewer asking your preference between these. Make sure you can validate your choice using sound reasoning or experience in your previous jobs.

"Both black hat and white hat testing are hacking procedures used to verify how secure a network and the information technology assets of an organization are. The difference between black hat and white hat testing is that black hat testers are true hackers who do not know the security implemented across the network. White hat testers have this information and use it to construct attacks meant to thwart the information security team's preventive measures."