ECSA/LPT

Module XXXXII

EC Council
EC-Council

Penetration
P
t ti T
Testing
ti
Deliverables and
Conclusion

Penetration Testing Deliverables

and Conclusion
The report
p
must be p
presented in PDF format,, unless
requested otherwise.

Do not send the report to unapproved staff.

PDF

Always deliver the report to stakeholders in the company

in person.
You must also be available 30-60 days after submitting
the report so that you can answer any queries.

EC-Council

Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited

Destroy the Report

Based on the agreement you signed with the
company you might
i h b
be asked
k d to d
destroy:

All the penetration reports related to the company.

Test results.
Reports.
Analysis documents.
Email correspondence.
Printed and electronic information.

This applies to every team member on the penetration testing

team.

EC-Council

Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited

Sign-Off Document
You might want the client to sign a signoff document.

At this stage, you might want to send the invoice for the
penetration testing job.

EC-Council

Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited

Summary
Present the report in the user requested format.
format
Submit the report to the authorized officer in person.
Destroy the stored information related to the test after submitting
th report.
the
t
If required,
q
, collect sign-off
g
documents from the client.

EC-Council

Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited

EC-Council

Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited

EC-Council

Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited