During the planning phase of a penetration test, which of the following elements would be MOST important to include in the Statement of Work to ensure that the penetration tester and the client have a common understanding of the tasks and goals?
Comprehensive report including executive summary and technical findings
Defined goals and objectives of the penetration test
Drafting a detailed checklist of potential vulnerabilities to investigate
Commercial penetration testing tools to be exclusively utilized