⦿ Submitting company
⦿ Authorised client contact(s)
⦿ Who is responsible for hosting the infrastructure/application?
Are there any devices in place which could impact the results of a penetration test?
⦿ Do you have full up to date backups of the systems/applications you intend to subject to testing? Have you verified that this process works?
⦿ Please provide the dates you would like testing to commence.
⦿ Would you require testing outside of normal business hours (9 am-5 pm)
⦿ Please describe the method of contact and urgency of contact pertaining to any findings during the engagement? For example (Critical findings – informed ASAP by supplied phone/email etc)
⦿ How would you like vulnerabilities defined? CVSS? Or our own weighting? Or other?
⦿ We provide after care for our clients and as such like to ensure the report is understood and important information is conveyed appropriately. This also ensures we have delivered a valuable service to you. How would you like this to take place? Video, Phone, No at all etc