Tests like this must be thoroughly communicated ahead of time and must be agreed to and formally approved by a relevant officeholder.

It authorises the pen tester to get help from friends or peers who are experts in other forms of pen testing.

It implies that the pen tester is not responsible for any permanent damage or data loss during the pen test.

It gives the pen tester unlimited permission to do anything with the Organisations systems and data.