Admin
Configure access and reference records.
Can
- Manage Users, People, engagement scopes, controlled documents
- View security findings, Inspections, Nonconformances
- Penetration Test Management
- Roles and access
Who can do what in Penetration Test Management
Give each person the records needed for their part of the work.
Who can do what
| Role | Engagement scopes | Security findings | Inspections and checks | Disposition and corrective actions | Audits and findings | Controlled documents |
|---|---|---|---|---|---|---|
| Admin | Edit | View | Edit | Edit | Edit | Edit |
| Security Lead | Edit | Edit | View | View | View | View |
| Tester | View | Edit | Edit | Edit | View | View |
| Inspection Reviewer | — | View | Approve | Approve | View | View |
| Corrective Action Owner | — | — | View | Edit | View | View |
| Effectiveness Reviewer | — | — | View | Approve | View | View |
| Auditor | — | — | View | View | Edit | View |
Each role in detail
Security Lead
Confirm authorized scope and review finding outcomes.
Can
- Manage engagement scopes, security findings
- View People, Inspections, inspection checks
Starts on: Open security findings
Tester
Record observed issues and supporting evidence.
Can
- Manage security findings, Inspections, inspection checks
- View engagement scopes, People
Starts on: Open security findings
Inspection Reviewer
Decide inspection disposition and assess required checks.
Can
- Manage Inspections, Nonconformances
- View inspection checks, security findings, People
Reviews and approves
- Approve Inspections
Starts on: Nonconformance queue
Corrective Action Owner
Record the cause, planned response and completion evidence.
Can
- Manage corrective actions
- View Nonconformances, Inspections, People
Starts on: Nonconformance queue
Effectiveness Reviewer
Assess a completed corrective action independently.
Can
- Manage corrective actions, Nonconformances
- View Inspections, inspection checks, People
Reviews and approves
- Approve corrective actions
Starts on: Nonconformance queue
Auditor
Plan audits and record requirement findings.
Can
- Manage Audits, audit findings
- View controlled documents, training acknowledgments, People
Starts on: Documents under review
Set up Penetration Test Management your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.