I have already got a report but i would like to have it improved, i feel there is alot of information missing and it could be longer and the grammer needs to be checked. The pictures used are old and need new and updated ones.
General Penetration Testing Report Writing Guidelines
In general, the written report should follow the format described in the SANS Writing a Penetration Testing Report, available at https://www.sans.org/reading-room/whitepapers/best…. The SANS paper includes a discussion describing each part of a pentest report, and a complete sample report in Appendix A. Since you are researching a single topic, and not actually conducting a pentest, modifications to the SANS format are appropriate as described below for your unique situation. All omitted or modified areas are important in actual penetration test reporting, and are omitted or modified here because they are related to actual penetration tests and document control and security requirements.
Target Audience
One of the considerations for writing a penetration testing report is the audience. In this case, assume that you are writing your report for Jane Smith, CIO, and Jim Jones, IT Systems Manager, both of Engulf & Devour, who have together asked your information systems security consulting company to perform a pentest on their systems, focused directly on your research topic rather than on a broad based test. Both Smith and Jones have indicated they intend to distribute the report to other constituencies, ranging from the CEO to the IT security team, so various levels of detail will be needed. Assume that you have already submitted a proposed attack and penetration test plan describing your firm’s approach to performing tests and the specific tasks and deliverables to be produced and have obtained all necessary approvals, and that it is now time to deliver your results. Given this audience, the report will require both technical and high level information, and it will need a well developed document format similar to the Appendix A Sample Penetration Testing Report.
Cover Information
For our purposes, you need have an appropriate cover page similar to the one in the example report, but otherwise may omit the Document Properties, Version Control, Table of Contents, and List of Illustrations parts described in §3.2 and §3.3 of the report writing description.
Executive Summary
The report will need an Executive Summary with all of its parts as described in §3.4 of the description and illustrated in §1 of the sample report in the appendix, except that in this case, the Timeline may be omitted, and the Summary of Findings should summarize what you found in your research and the Summary of Recommendations should summarize the recommendations you discovered or arrived at in your research.
Methodology
Your Methodology section (§3.5 in the description, §2 in the sample) should describe the Planning and Exploitation steps appropriate for your area of research. In the Reporting part assess the risk(s) your research topic represents in terms of the following: the type(s) of asset that can be impacted by the vulnerabilities associated with your research topic, the nature of the vulnerabilities, and the likelihood of exploitation of the vulnerabilities.
Detail Findings
As you are not actually performing a penetration test, use the Detail Findings section (§3.6 in the description, §3 in the sample report) to report in detail on the nature of the vulnerabilities presented by your research area, methods of testing for the vulnerabilities, methods for exploiting them, and recommendations for countering or preventing the threat.
References and Appendices
Lastly, include references in the References section, and use Appendices as applicable for containing details to support the main report.
Do you need a similar assignment done for you from scratch? We have qualified writers to help you. We assure you an A+ quality paper that is free from plagiarism. Order now for an Amazing Discount!
Use Discount Code "Newclient" for a 15% Discount!
NB: We do not resell papers. Upon ordering, we do an original paper exclusively for you.
