Penetration Test - Planning and Scoping(3)
RESOURCES AND REQUIREMENTS
- What does each party provide?
- At what point does the engagement begin?
- Confidentiality of findings
- Known vs. unknown
- Is the test a secret?
BUDGET
- How much will each section of the test cost?
- Every task in the test should have a value
- Want to add more tests? It'll cost more
- One of the most important factors
- Directly impacts available resources and time
QUICK REVIEW
- What do you provide and what does the client provide？
- Are your activities known or secret?
- Determine the value of each part of the test
- Don't underestimate the impact of an accurate budget