View source for Writing Reports: value the real risk

{{Template:OWASP Testing Guide v4}}
----

This Chapter describes how to value the real risk based on the results of a security assessment. The idea is to create a general methodology to break down the security findings and evaluate the risks with the goal of prioritizing and managing those risks. The real risk is presented in a table that can easily represent a snapshot of the assessment. This table represents the technical information delivered to the client and it is important to present an executive summary for the management.
<br>

[[How to value the real risk AoC|5.1 How to value the real risk]] <br>
[[How to write the report of the testing AoC|5.2 How to write the report of the testing]]<br>
<br> <br>