2KKUU7ita

In This Chapter
Chapter 3
Developing Your Ethical
Hacking Plan
▶ Setting ethical hacking goals
▶ Selecting which systems to test
▶ Developing your ethical hacking testing standards
▶ Examining hacking tools
A s an information security professional, you must plan your ethical hacking
efforts before you start. A detailed plan doesn’t mean that your testing
must be elaborate. It just means that you’re clear and concise about what
to do. Given the seriousness of ethical hacking, you should make this process
as structured as possible.
Even if you test only a single web application or workgroup of computers,
be sure to take the critical steps of establishing your goals, defining and
documenting the scope of what you’ll be testing, determining your testing
standards, and gathering and familiarizing yourself with the proper tools for
the task. This chapter covers these steps to help you create a positive ethical
hacking environment so you can set up for success.
Always make sure you have approval from management, executives, or your
clients before you start implementing your ethical hacking plan.