ABSTRACT

Once the decision is made that a security assessment will be performed, careful planning must be done to ensure that it is smooth and efficient. Good planning will save time and yield better results. Planning for the security assessment refers to logistic aspects such as scheduling with the client, specifically the subject matter experts who will participate in the security assessment. The key task in this phase, which will influence the scheduling and resources, is the scope definition process. You must be able to define what you are going to do in the security assessment so that you can properly plan the time and resources to complete the assessment.