<?xml version="1.0" encoding="UTF-8"?>

<!-- variable placeholders that can be used by the report writer throughout the offerte -->
    <!-- NOTE: values are taken from <meta> section below! -->
        
    <!-- CUSTOMER -->
    
    <!-- <client_long/>          long client name;                   value taken from /offerte/meta/client/full_name -->
    <!-- <client_short/>         short client name;                  value taken from /offerte/meta/client/short_name -->
    <!-- <client_coc/>           Chamber of Commerce number;         value taken from /offerte/meta/client/coc -->
    <!-- <client_street/>        client street & number;             value taken from /offerte/meta/client/address -->
    <!-- <client_city/>          client city;                        value taken from /offerte/meta/client/city -->
    <!-- <client_country/>       client country;                     value taken from /offerte/meta/client/country -->
    <!-- <client_legal_rep/>     client legal representative;        value taken from /offerte/meta/client/legal_rep -->
    <!-- <client_waiver_rep/>    client legal representative;        value taken from /offerte/meta/client/waiver_rep -->
    <!-- <client_poc1/>          first point of contact for client;  value taken from /offerte/meta/client/poc1 -->
    
    <!-- PROJECT -->
    
    <!-- <p_duration/>      number of days;                     value taken from /offerte/meta/activityinfo/duration -->
    <!-- <p_boxtype/>       pentest type;                       value taken from /offerte/meta/activityinfo/type -->
    <!-- <p_fee/>           fee                                 value taken from /offerte/meta/activityinfo/fee -->
    <!-- <p_testingduration/>                                   value taken from /offerte/meta/activityinfo/test_planning -->
    <!-- <p_reportwritingduration/>                             value taken from /offerte/meta/activityinfo/report_writing -->
    <!-- <p_reportdue/>                                         value taken from /offerte/meta/activityinfo/report_due -->
    
    <!-- US -->
    
    <!-- <company_long/>          long company name;                   value taken from /offerte/meta/company/full_name -->
    <!-- <company_short/>         short company name;                  value taken from /offerte/meta/company/short_name -->
    <!-- <company_legal_rep/>     company legal representative;        value taken from /offerte/meta/company/legal_rep -->
    <!-- <company_poc1/>          first point of contact for company;  value taken from /offerte/meta/company/poc1 -->
    <!-- <company_svc_long/>      service offered in this offerte;     value taken from /offerte/meta/offered_service_long -->
    <!-- <company_svc_short/>     service offered, shorter descr.;     value taken from /offerte/meta/offered_service_short - NOTE: basically used to have more 'natural' language in snippets -->
    
    <!-- APP -->
    <!--  Is there an app to be tested? Put it here so included app snippets can use it -->
    
    <!-- <t_app/>           name of the app -->
    <!-- <t_app_producer/>  name of the company producing the app -->

<offerte xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:noNamespaceSchemaLocation="../dtd/offerte.xsd" xmlns:xi="http://www.w3.org/2001/XInclude" xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="nl">

    <!-- document meta information; to be filled in by the offerte writer  -->

    <meta>
        <offered_service_long>penetration testing services</offered_service_long>
        <offered_service_short>penetration test</offered_service_short>
        <xi:include href="snippets/company_info.xml"/>
        <targets><!-- one target element per target -->
            <target>...</target>
        </targets>
        <permission_parties>
        <xi:include href="client_info.xml"/>
            <!-- the party section is optional; if no other party needs to give permission, please remove whole party element -->
            <party>
                <full_name>...</full_name>
                <short_name>...</short_name><!-- short party name; if no short name: same as long name -->
                <waiver_rep>...</waiver_rep>
                <address>...</address>
                <city>...</city>
                <country>...</country>
            </party>
        </permission_parties>
        <activityinfo>
            <duration>...</duration><!-- duration of pentest, in working DAYS -->
            <test_planning>...</test_planning><!-- date or date range in text, e.g. May 18th until May 25th, 2015 -->
            <report_writing>...</report_writing><!-- date or date range in text, e.g. May 18th until May 25th, 2015 -->
            <report_due>...</report_due><!-- date or date range in text, e.g. May 18th until May 25th, 2015 -->
            <nature>...</nature>
            <type>...</type><!-- please choose one of the following: black-box, grey-box, crystal-box -->
            <fee denomination="euro">...</fee><!-- euro|dollar -->
            <target_application>...</target_application><!-- name of application to be tested (if any; if none, delete target_application element) -->
            <target_application_producer>...</target_application_producer><!-- name of application to be tested (if any; if none, delete target_application_producer element) -->
        </activityinfo>
        <version_history><!-- needed for date on frontpage and in signature boxes; add a new <version> after each review and make sure to update the date/time -->
            <version date="2015-06-08T10:00:00" number="auto"><!-- actual date-time here; you can leave the number attribute alone -->
                <v_author>ROS Writer</v_author><!-- name of the author here -->
                <v_description>Initial draft</v_description>
            </version>
        </version_history>
    </meta>
    
    
    <!-- section with some more info on the application (if any) -->
    <section>
        <title>The <t_app/>; Application</title>
        <p><t_app/> is a ...</p>
        <p>...</p>
    </section>
    
    <!-- section with some more info on the target infrastructure-->
    <section>
        <title>The <client_short/> Infrastructure</title>
        <p>...</p>
    </section>

    <!-- Project overview section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/projectoverview.xml"/>

    <section>
        <title>Pentest Scope</title>
        <p>...</p>
    </section>

    <!-- Prerequisites section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/prerequisites.xml"/>

    <!-- Disclaimer section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/disclaimer.xml"/>

    <!-- Pentest Methodology section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/methodology.xml"/>
    <xi:include href="snippets/offerte/nl/methodology_basic-scan.xml"/>

    <!-- Team and Reporting section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/teamandreporting.xml"/>

    <!-- Planning and payment section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/planningandpayment.xml"/>

    <!-- About ROS section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/aboutus.xml"/>
    
    <!-- Work condition section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/conditions.xml"/>
    
    <!-- General terms and conditions section (complete section is in a snippet) -->
    <xi:include href="snippets/offerte/nl/generaltermsandconditions.xml"/>
    <generate_waivers/>
</offerte>
