Finalize and submit your comprehensive project plan. In order to complete a final, polished, and professional plan, you will take each of your drafts, incorporate feedback as needed, and write up the information from those drafts into one cohesive and well-written plan. You should also include any supporting documents that you created along the way, such as Gantt charts, a WBS, etc. It is very important that you review the rubric for this project as you complete it so that your submission aligns with your instructor's expectations. For additional details, please refer to the Final Project Guidelines and Rubric document.

Complete the Penetration Testing Plan Template to create a Penetration Testing Plan for the organization you chose.Research/Consider and include the following:Pentest Pre-PlanningEngagement timeline: Tasks and who performs themTeam location: Where will the penetration team execute their tests? Team location can be the location of the teams involved with testing such as IT Operations. It's not uncommon for teams to operate in separate locations. Therefore, for this assignment the team location can be San Francisco, CA or it can be at the company headquarters such as Seattle, WA. This part is all fictional data so feel free to complete this portion of the assignment however you like. If you need ideas, you can look at larger public companies such as Amazon, Google, Microsoft, Apple, etc. as they tend to share a good deal of information on their websites about their organizations, office locations, corporate offices, etc.Organization locations tested: multiple locations, countries (export restrictions and government restrictions). Organization location can be the headquarters of the corporate office (e.g. Seattle, WA).Which pentest technologies will be used? Consider the following as you research options:Scanning Tools: Nmap, NiktoCredential Testing Tools: Hashcat, Medussa, John the Ripper, Cain and AbelOSINT Tools: Whois, TheHarvesterWireless Tools: Aircrack-ng, KismetNetworking Tools: Wireshark, HpingWhat client personal are aware of the testing?What resources provided to pentest team?Test Boundaries:What is tested?Social engineering test boundaries? What is acceptable?What are the boundaries of physical security tests?What are the restrictions on invasive pentest attacks?What types of corporate policy affect your test?Gain Appropriate authorization (Including third-party authorization)Pentest Execution Planning: Given the scope and constraints you developed in your Pentest Pre-Plan, plan the following pentest execution activitiesReconnaissanceScanningGaining AccessMaintaining AccessCovering TracksPentest Analysis and Report Planning: Analyze pentest resultsReport pentest results Project sponsor can be CIO, CISO, CEO, the board, etc.
Business context for penetration test is a business statement for why the test is needed.
Project scope description can be application testing, internal/external network testing, wifi testing, physical security testing, social engineering testing. These are common scopes for real-world penetration testing.
Date prepared & prepared by are the current date and you can list your name.
Organization location can be the headquarters of the corporate office (e.g. Seattle, WA).
Team location can be the location of the teams involved with testing such as IT Operations. It's not uncommon for teams to operate in separate locations. Therefore, for this assignment the team location can be San Francisco, CA or it can be at the company headquarters such as Seattle, WA. This part is all fictional data so feel free to complete this portion of the assignment however you like. If you need ideas, you can look at larger public companies such as Amazon, Google, Microsoft, Apple, etc. as they tend to share a good deal of information on their websites about their organizations, office locations, corporate offices, etc.Regarding the chart on page 2 in the template that contains ID, Activity, Resource, Labor, Material, & Total Cost, here's what to consider for each:ID: simple numbering system (1, 2, 3, etc.)Activity: related activity or specific tasks required to complete the workResource: resources (tool, etc.) needed to complete the workLabor: how much labor is required by individuals to complete the workMaterial: what's needed to complete the itemThe items related to the chart on page 2 are all directly related to the work required to complete penetration test activities and manage the effort. Please search the web for examples and some ideas. These numbers and information can be estimates.Note : week 1 company was google