During the initial phase of a penetration testing engagement, what document typically outlines the services to be provided, timelines, deliverables, and responsibilities of both the penetration testing team and the client?
Service-level agreement
Non-disclosure agreement
Statement of work
Master service agreement