
6 Managing Network Vulnerability Assessment
from coming in and stating that they run a much more complete vulnerability
assessment and can provide more value than the vulnerability assessment that
you had run.
How Many Trees Should Die to Generate This Type of Report?
It all depends. Yes, this is the typical consultant answer for everything but a
good rule-of-thumb is that the report should be no more than 50 pages. Try
to keep the report in the 20- to 30-page range, but sometimes this just cannot
be done. This type of report may not look as impressive sitting on the shelf
behind the CSO. However, it is more likely to be read and used.
What Are Vulnerabilities? ...