Penetration Testing
Every pen testing engagement differs from each other & no customers are the same. It is very important, to have a clear understanding of the customer's objective, to prepare a plan that is executed during the engagement. Plan needs to be prepared with a scope to manage the schedule while maintaining the customer's expectation. Prevent scope creep - when assets are added to target list in the last minute, trying to save money & time. Since this assets are not part of the penetration testing engagement that is not part of the written authorization been given permission by the Senior Management scope creep is very dangerous for penetration testing engagement. Penetration testing is usually not trivial task, as organizations are often hesitant to allow such activities on their network until organizations has improved their security model. In all cases specific factors must be addressed during the planning phase for understanding the requirem...