Kali Linux 2018: Assuring Security by Penetration Testing - Fourth Edition

Scoping the PCI DSS penetration test

Prior to conducting any type of penetration test, the penetration tester needs to engage with the client to ensure that all the appropriate information is obtained. During the target scoping phase, the penetration tester will gather information from the client that will be used to generate target assessment requirements, define the parameters for testing, and the client's business objectives and time schedule. This process plays an important role in defining clear objectives toward any kind of security assessment. By determining these key objectives, you can easily draw a practical roadmap of what will be tested, how it will be tested, what resources will be allocated, what limitations will be applied, ...