Summary

This chapter concluded this book by providing guidance for developing professional customer deliverable reports post-Penetration Testing services. Breaking into systems and other hands on technical work is fun; however, detailed reporting and solid business practices pay the bills. What makes a professional service practices successful is the ability to become a trusted advisor for their related field. For security requirements, this means helping customers meet compliance regulations, reduce risk from vulnerabilities, and improve how to identify threats.

The first topic covered was compliance, because that is a common method to show value for procuring services. We find customers find budget when there is a risk of not meeting a mandate or reacting to a recent incident, so knowing the most popular standards will improve your ability to matter to your customers. Next, we looked at different methods to bill for services, as well as some things to look out for regarding quoting for...