In a penetration testing project overview, which information should be included about personnel?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

In a penetration testing project overview, which information should be included about personnel?

Explanation:
Knowing who is involved and how to contact them is essential for coordinating a penetration test. In a project overview, listing names, contact information, and each person’s role or title provides a clear map of who is responsible for what, who approves actions, and who to escalate to for issues. This supports governance, smooth communication, and accountability, helping both the client and the testing team know the appropriate points of contact and decision-makers. Listing only testers’ names omits crucial coordination details. Project budget and timeline belong in project management context, not in the personnel section. Client company history is not relevant to the day-to-day execution of the engagement and could raise unnecessary concerns. So, including names, contact info, and role/title is the most informative and practical approach for the personnel section.

Knowing who is involved and how to contact them is essential for coordinating a penetration test. In a project overview, listing names, contact information, and each person’s role or title provides a clear map of who is responsible for what, who approves actions, and who to escalate to for issues. This supports governance, smooth communication, and accountability, helping both the client and the testing team know the appropriate points of contact and decision-makers.

Listing only testers’ names omits crucial coordination details. Project budget and timeline belong in project management context, not in the personnel section. Client company history is not relevant to the day-to-day execution of the engagement and could raise unnecessary concerns.

So, including names, contact info, and role/title is the most informative and practical approach for the personnel section.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy