Should MSPs Work With Hackers?

A recent article from SmallBusiness.co.uk claimed that roughly 20% of UK businesses had invited hackers to "assess their cyber security and systems." The article cites a Radware study and further claims that 37% of UK businesses are open to the concept of working with hackers to improve security.

I would like to pose the following two questions: a) does working with a hacker actually improve your organization's security, and b) should managed service providers work with and collaborate with hackers?

Do Hackers Perform a Valuable Service?

The legacy argument over the ethics of hacking go back decades. From telephony phishing to more recent cyber attacks on critical infrastructure (think stuxnet), hackers have been living amongst us for a long time. The simplistic view of white hat vs black hat hackers is exactly that; simplistic and ignoring of the deep complexity and shades of ethical and legal issues involved in the hacking community.

But, the fundamental question still remains; are hackers good for businesses? I suppose, there is a basic level of service hackers can provide which is viewing a system from the standpoint of how to penetrate it. Other than white hat hackers who claim to have "ethical" standards to how they perform their services, the real issue I might raise is the credibility of a hacker and how would a business manage that relationship.