These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- Penetration Test Management
- Frequently asked questions
Questions, answered
Answers about scope, findings, inspection review and setup.
Penetration Test Management
10 questions
Can't find it? Write to support@erp.ai.
How do I get started?
Click Get started, then use Proto to configure Penetration Test Management for your business. Begin with one authorized engagement, a named tester and security lead, and a finding that can be followed through retest.
What does an engagement scope contain?
It records the client name, authorized targets, start and end dates, and authorization document. Review these details before testing work begins.
How is a finding tied to its authorization?
Each security finding links to an engagement scope. It also records the affected asset, severity, evidence and current status.
How do we tell remediation from retesting?
The finding status distinguishes Open, Remediating and Retest. Closed and accepted risk are separate recorded outcomes.
Can a tester record check evidence?
Yes. An inspection check holds a requirement, observation, result and evidence attachment under its inspection.
Who decides an inspection outcome?
The inspection reviewer checks the required results and chooses whether the scope is accepted or rejected. Failed evidence remains with the check.
What follows a rejected inspection?
A linked nonconformance records severity and disposition work. Corrective actions link to that issue and have an owner, due date and effectiveness state.
How is a correction closed?
An independent effectiveness reviewer checks the response. The issue closes after its linked actions are accepted.
What do audit records cover?
An audit records scope, auditor and reporting status. Its findings record requirement, severity, owner and due date.
How do people acknowledge a document?
A training acknowledgment links a person to a controlled document and records the acknowledgment date. Keep the intended version clear.
Set up Penetration Test Management your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.