How does good scoping impact a penetration test?How does good scoping impact a penetration test?
Good scoping is important to both the client and the testing organization because it means that the client gets the most bang for their buck by ensuring penetration testers are spending time seeking to exploit vulnerabilities surrounding their organizations' most valuable data and physical assets. For example, if the client advises that they have 15 IPs, of which ten of them are phones and five of them are computers and fiber network devices (i.e., routers or switches), the testers have a better understanding of what needs to be tested and don't need to spend time identifying proper test methodology for a specific platform.
