Pre-Attack Phase: Understanding your Client's requirements

Question 1

Video header:

Answer 1

Understanding the client’s requirements is of great importance as it ensures that the penetration test is thorough and the client is satisfied. It is considered good practice to create a checklist of the testing requirements to determine what the client wants to be tested.

Question 2

General notes:

Answer 2

• it’s a bit of an obligation of the penetration tester to make certain that they’re client knows what they’re paying for. More often than not, you’ll get clients that don’t fully understand what it is that they’re requesting, so make sure that they’re made aware of the processes involved in the work you’ll be doing.
• create a checklist with your client so that you both understand exactly what it is that they want
• make suggestions of your own if needed
• make sure your client is satisfied, make sure you understand their needs, make sure that they understand what they’re asking you to do
• no loose ends, define everything clearly