11The Deliverable


All the work from the engagement—materials collected, communications, tasks performed, results from tools, vulnerabilities, and any information about the target—culminates in a final document. Arguably, the company is effectively paying for the deliverable. The actions taken to this point were performed for the sole purpose of expressing the results, and that is where the tipping point of value can materialize: expressing the results.

All too often, the deliverable from a penetration testing engagement is a collection of numbers, attributes, and assumed facts, the assumption of scientific survey results compiled in a manner ...

Get CISO's Guide to Penetration Testing now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.