Compliance-Based Penetration Testing: What Most Pentesters Get Wrong

Lessons from 250+ engagements, and the misconceptions I keep running into. A practical look at what compliance-driven penetration testing actually requires — scope, evidence, reporting and retesting — versus what most testers deliver.