Evidence, Reproducibility and Auditability in Security Testing
Prescriptive rules to ensure that security test results are verifiable, reproducible and auditable, with protection of critical assets and separation between automated signal and human decision.