The MOST important success factor in planning a penetration test is:
the documentation of the planned testing procedure.
scheduling and deciding on the timed length of the test.
the involvement of the management of the client organization.
the qualifications and experience of staff involved in the test.
The most important part of planning any penetration test is the involvement of the management of
the client organization. Penetration testing without management approval could reasonably be
considered espionage and is illegal in many jurisdictions.