Kali Linux 2018: Assuring Security by Penetration Testing - Fourth Edition

Gathering client requirements

This step provides a generic guideline that can be drawn in the form of a questionnaire in order to devise all the information about the target infrastructure from a client. A client can be any subject who is legally and commercially bound to the target organization. Thus, for the success of the penetration testing project, it is critical to identify all internal and external stakeholders at an early stage of the project and analyze their levels of interest, expectations, importance, and influence. A strategy can then be developed to approach each stakeholder with their requirements and involvement in the penetration testing project, in order to maximize positive influences and mitigate potential negative impacts. ...