Select the location

- Now that you have the assessors,…it's time to think about a location.…The location where the assessors operate…should also be part of the assessment planning.…Assessment locations can vary…based on the testing technique selected.…For instance, internal wireless network scanning…requires a testing location such as a desk or cubicle…within the organization, whereas external network scans…and penetration tests can be conducted…from locations outside of the organization.…

Internal network tests may need to be conducted…from particular points in the network.…Many networks are segmented to only allow limited traffic…to flow through certain parts of the network.…This may help network security, but it can create challenges…for technical security assessors who want to analyze…as much traffic as possible for potential security problems.…Assessors may need to conduct their tests…in parts of the network where either the users…or target systems reside,…depending on the objectives of the assessment.…

They may also want to arrange for SPAN ports…