Access Control and Identity Management, 3rd Edition

Preparing the Final Test Report

The major deliverable from any penetration test is the analysis and report delivered to the organization. This report—and prior authorization—is all that really separates penetration tests from hacking. The first section of the final test report must include a detailed description of the penetration test team’s activities, including which methods were used and what areas of the infrastructure were targeted. The next section should contain details of the vulnerabilities they found and what areas were adequately hardened and resisted their attacks. The final section of the report should contain the test team’s final analysis, prioritization of risk, and recommendations for hardening.

The organization uses this ...