Hi, and welcome back to section six Net Cat Penetration Test.
In this video, we are going to talk about reporting and documentation.
Organizations use penetration testing reports to help identify
and fix security vulnerabilities in their systems before
attackers can exploit them.
A penetration testing report helps organization documentation the
objectives,
methods and result of the testing conducted to various
of audience.
It explains to the reader the overall purpose of the test.
Details on the terms identified mean the pre engagement section related
to risk countermeasures and testing goals should be
present to connect to the reader to the overall test objectives and
the relative results.
Penetration test reports can be used to identify security
vulnerabilities, understand where systems are vulnerable,
determine what steps to take to improve security.
A risk ranking can be used to create a scale of information security
risk. In this risk ranking,
we have extreme that's mean catastrophic financial loses
occurring. As a result,
high significant financial losses occurring as a
result
elevated it's a potential for material losses occurring as a result.
Moderate,
let's mean the possibility of limited ref financial losses occurring as a
result. And low,
let's mean measurable negative impact as a result.
And we have some sections in the general findings section can be
include providing a signups of the issues found during the
penetration test to report target test testing results,
process attack scenarios, and S set rates, for example.
Not a very interesting section can be a recommendation summary that
provides the reader with a high level of understanding of the task needed
to resolve the risks in need.
Fight during the penetration test and a technical report
section to communicate to the reader technical details of the test
and all the aspects of the test to describe in details the scope,
information, attack path,
and remediating suggestions of the test. In this video,
we saw about reporting and documentation.