Question from a reader

CS asked

I am trying to write a report after a RT assessment, what do you recommend for the report? What sections?


Ah... The report... The part we all dread... Well, I usually include the following sections.

  1. Executive Summary
  2. Introduction
  3. Rules of Engagement
  4. Scope
  5. Red Team Composition
  6. Atmospherics (environmental recon)
  7. Threat Assessment
  8. Worst Case Scenarios
  9. Results and Analysis
  10. Appendix

These might vary in your case, but I found this format to work most of the time in our assessments.