Glossary: Vulnerability Management and Monitoring

rules of engagement

Also written: scope and rules of engagement

The part of a pen test agreement that says which systems may be tested, when, and what was allowed.