Understanding a Prerequisite Sheet
What is a Prerequisite?
A prerequisite, by definition, it’s something that is necessary in order to carry out a task.
It is vital to fill in the prerequisite sheet before the assessment. This will give the testers a better understanding of the environment, desired type of access, version, etc.
You can access the pre-requisites sheet from the Asset Dashboard Welcome Banner. There you will find a message requiring you to fill in the prerequisites, and a button named Fill Pre-Requisites, when you click it, it will take you to the Pre-Requisites page.
The Welcome Banner is the first thing you see when you arrive at the prerequisites page. The number of user roles, dynamic pages, and endpoints can be found here.
There is a subtitle at the bottom of this section that tells you the date the prerequisites sheet was shared with Siemba, and below that is the notification bell button, which displays an orange circle indicating that you have a new notification.
To access your notifications, simply click on the bell icon, and a dropdown menu will display all new and old notifications.
By clicking the corresponding link at the end of this section, you can download or email a copy of the pre-requisites sheet.
Filling Out The Prerequisites Sheet
On the pre-requisites page, you will notice a few sections with questions that you must answer before the team can begin the pentest.
After you've answered all of the questions and clicked the Share with Siemba button, you can view all of your responses and leave comments for the Siemba testers by clicking the comment logo button on the right side of the questions.
You can share the sheet with the assigned Siemba Tester by clicking the Share with Siemba button at the bottom of the page once all the mandatory questions have been answered. The assigned Siemba Tester will then verify the information provided and clarifications regarding any questions can be carried out using the respective comments sections. The Prerequisites sheet will be approved by Siemba when there are no issues with all the information and the testing phase can be initiated.