Pre‐Engagement
Alissa Knight · 2020
This chapter begins by decomposing the necessary steps of preparation before the actual penetration test starts. It covers the importance of defining the scope of the test, rules of engagement, which engineering documents should be requested from the stakeholders, and the project management phases according to the Project Management Body of Knowledge aligned to the penetration testing framework chosen for this book. In the end, the chapter describes the hardware and software that should be used in a lab when performing penetration testing of telematics control units (TCUs) and infotainment systems. The Penetration Testing Execution Standard is an effort to standardize the process of how penetration tests are performed. A work breakdown structure illustrates the alignment of tasks in a given project to the associated team member responsible for delivering it in a hierarchical chart. A large amount engineering documentation will be used receive when performing a penetration test of a TCU or head unit.