boilerplate text for objective/rian/futurework/conclusion

This commit is contained in:
skyanth
2020-03-26 10:19:35 +01:00
parent 5f5b56d8f1
commit 66b690dd8c
4 changed files with 41 additions and 10 deletions
+14
View File
@@ -1,4 +1,18 @@
<?xml version="1.0" encoding="UTF-8"?>
<section id="conclusion" xml:base="conclusion.xml" break="before" inexecsummary="yes">
<title>Conclusion</title>
<p>We discovered <finding_count threatLevel="all"/>-severity issues during this penetration test.</p>
<p><todo desc="Add some paragraphs describing in high level the impact of these findings on the organization, priorities in fixing them"/></p>
<p>We recommend fixing all of the issues found and then performing a retest in order to ensure
that mitigations are effective and that no new vulnerabilities have been introduced. </p>
<p> Finally, we want to emphasize that security is a process this penetration test is just a
one-time snapshot. Security posture must be continuously evaluated and improved. Regular audits
and ongoing improvements are essential in order to maintain control of your corporate
information security. We hope that this pentest report (and the detailed explanations of our
findings) will contribute meaningfully towards that end. </p>
<p> Please don't hesitate to let us know if you have any further questions, or need further
clarification on anything in this report. </p>
</section>
+11 -3
View File
@@ -3,9 +3,17 @@
<title>Future Work</title>
<ul>
<li>
<b>Title</b>
<br/>
Description
<b>Retest of findings</b>
<br/> When mitigations for the vulnerabilities described in this report have been deployed, a
repeat test should be performed to ensure that they are effective and have not introduced
other security problems. </li>
<li>
<b>Regular security assessments</b>
<br/> Security is an ongoing process and not a product, so we advise undertaking regular
security assessments and penetration tests, ideally prior to every major release or every
quarter. </li>
<li>
<todo desc="Add any specific future work for this project or remove this list item"/>
</li>
</ul>
</section>
+5 -2
View File
@@ -1,6 +1,9 @@
<?xml version="1.0" encoding="UTF-8"?>
<section id="resultsinanutshell" xml:base="resultsinanutshell.xml">
<title>Results In A Nutshell</title>
<p>During this pentest we found <finding_count threatLevel="all"/> findings.</p>
<p>...</p>
<p>During this <todo desc="INSERT-SORT-OF-TEST"/> penetration test we found <finding_count threatLevel="all"/>-severity
issues.</p>
<p><todo desc="Describe what the findings relate to"/></p>
<p>By exploiting these issues, an attacker might be able to <todo desc="Loosely enumerate impact of findings"/>.</p>
</section>