2 docs tagged with "reporting"

The seven phases of the Penetration Testing Execution Standard (PTES) as a methodological depth reference for pentest, anchoring the existing offensive validation requirement. A method reference proportional to risk; neither a certification nor a substitute for regulatory TLPT.

Organisational policy that defines the requirements for the definition, collection, analysis and reporting of security governance KPIs, including metric categories, reporting cadence, responsibilities, intervention thresholds and integration with maturity frameworks (SAMM, SSDF), proportionate to the criticality level (L1, L2, L3).