List: websecurity@lists.webappsec.org
From: Christian Heinrich
Re: [WEB SECURITY] Penetration Testing Requirements
Mon, Feb 27, 2012 8:17 PM
Mostafa,
This would depend on the scope i.e. number of networks, hosts, web
applications and whatever they are in production, dev, etc and if an
unscheduled outage is acceptable during business hours, etc
As a rule of thumb you shouldn't be able to view the previous report(s)
during the penetration test for independence but at the conclusion to
comparison to