A municipal PMO asks when reporting work should start during a multi-week penetration test. What timing is preferred?
Select an answer to reveal the explanation.
Short Explanation
Reporting is not a Sunday night essay after the adventure. Capture evidence and draft findings as you go so the story stays accurate. Last-day panic reports read like last-day panic reports.
Full Explanation
Continuous documentation during testing improves accuracy, completeness, and remediation usefulness of the final commercial report. Deferring all writing to the end increases the chance of lost evidence and shallow narratives. Memory-only dictation, unnecessary wiping, or handoff to someone without engagement context degrade quality. Draft-as-you-go is standard professional discipline.