Penetration Test - Planning and Scoping(3)

RESOURCES AND REQUIREMENTS

• What does each party provide?
• At what point does the engagement begin?
• Confidentiality of findings
• Known vs. unknown
  • Is the test a secret?

BUDGET

• How much will each section of the test cost?
• Every task in the test should have a value
  • Want to add more tests? It'll cost more
• One of the most important factors
  • Directly impacts available resources and time

QUICK REVIEW

• What do you provide and what does the client provide？
• Are your activities known or secret?
• Determine the value of each part of the test
• Don't underestimate the impact of an accurate budget