|
Identify all Stakeholders and the Type of Information They Need
| Different stakeholders have different needs and different knowledge levels regarding security and the application under
test. Based on these criteria, categorize the stakeholders and list their specific interests. |
Build a Report for each Stakeholder
Create reports based on the specific needs of different stakeholder types. For each issue found, outline the concept,
the risks and the potential solutions.
|
Present Reports to Stakeholders and Develop an Action Plan
| Set up a review meeting with the target audience, go through each important item, and reach a resolution. Capture the action
plan items and, if needed, create specific work items and assign responsibilities. |
|
