Don't underestimate the importance of reporting. A penetration test report serves as a way for you to tell your story of navigating through the target organization and discovering vulnerabilities. It allows you to communicate important information to stakeholders such as the executive and IT management teams. This will help them to drive remediation efforts and provide executive backing to any policies that may need to be created or updated to address risks that were discovered. Remember that, with information security, if there is no backing by an executive stake holder, policies are bound to fail.
For technical teams, the report provides a clear picture of how vulnerable their environment is. It will provide them with the full technical details of what is vulnerable, why it is vulnerable, who it will affect, and how the vulnerability...
