You are conducting a penetration test for a financial instit…
You are conducting a penetration test for a financial institution and are in the process of documenting your findings. During the test, you successfully exploited a vulnerability that allowed you to access sensitive customer data. You need to document this finding in a way that will be credible and useful for the client, who must present the report to a regulatory body. Which of the following actions should you take to ensure your documentation is both credible and compliant with industry standards?