The executive summary includes the entire summarization of the report in general and non-technical terms, and focuses on providing knowledge to the senior employees of the company. It contains the following information:
- The scope of the penetration test: This section includes the types of analyses performed and the systems that were tested. All the IP ranges that were tested are listed in this section. Moreover, this section contains severity information about the test as well.
- Objectives: This section defines how the test will be able to help the target organization, what the benefits of the test will be, and so on.
- Assumptions made: If any assumptions were made during the test, they are to be listed here. Suppose ...
