Penetration Testing: Protecting Networks and Systems

CHAPTER 9: PREPARING THE REPORT

The ultimate goal of penetration testing is to help an organization to secure their networks, systems and databases. The pen tester is given the responsibility of providing meaningful information to the client organization, which will enable them to put forward a plan for mitigating any vulnerabilities and developing enhanced security strategies.

The penetration test report will often include several sections, including a brief summary, a listing of all work done, a detailed list of vulnerabilities found, a ranking of the risk level for each vulnerability, a list of recommendations, and a summary of the tester’s opinion on the overall health of the organization’s security framework. It is important, however, to ...