Glossary: Compliance, Privacy and Penetration Testing

Engagement letter

Also written: scope statement, engagement scope

A document that sets the scope of one audit or assessment: which systems, locations, time period and standard are included, and what is excluded. For example, Dana's engagement letter for Kettle & Crane covered the payment pages and office network for the last 12 months and excluded the roastery.