Task Descriptor: Build Reports |
This task describes the main steps for creating and presenting the right set of reports for each type of stakeholder.
Based on Method Task: Build Reports
Relationships
Inputs | Mandatory: Test Findings | Optional: Security Test Policy Test Plan | External: None
Outputs | Test Evaluation Summary
Steps
Identify all Stakeholders and the Type of Information They Need
Different stakeholders have different needs and different knowledge levels regarding security and the application under test. Based on these criteria, categorize the stakeholders and list their specific interests.
Build a Report for each Stakeholder
Create reports based on the specific needs of different stakeholder types. For each issue found, outline the concept, the risks and the potential solutions.
Present Reports to Stakeholders and Develop an Action Plan
Set up a review meeting with the target audience, go through each important item, and reach a resolution. Capture the action plan items and, if needed, create specific work items and assign responsibilities.
Properties
Predecessor | Evaluate Security Risks
Multiple Occurrences |
Event Driven |
Ongoing |
Optional |
Planned |
Repeatable |
© Copyright IBM Corp. 1987, 2009. All Rights Reserved.