At the moment, the testing team section includes a table of name + biography snippet entries for all pentesters and the approver via <generate_testteam/>.
I would like to start a discussion around potential ways to extend this section to cover more people who were personally involved in the pentest and report. It is also a good opportunity to clarify the individual roles of the people listed in the table, so that the reader doesn't have to jump to the other end of the report and look up roles manually in the "Document Properties" table on page two.
Primarily, I think it would be fairly straightforward to add the reviewer to this table of involved contributors.
My initial design is to keep using one table for the whole team and adding role descriptions ("Pentester", "Reviewer", "Approver") in a second line under their name in the left column. I've experimented with italic font style for the role label, but other styles may work as well.
I anticipate the need to change the format for the <reviewers> list in report.xml since each <reviewer> would need a name and biography field instead of purely a name.
The most problematic edge case I can think of is if one person fulfills roles in more than one category to avoid multiple entries in the table for one person.
At the moment, the testing team section includes a table of name + biography snippet entries for all pentesters and the approver via
<generate_testteam/>.I would like to start a discussion around potential ways to extend this section to cover more people who were personally involved in the pentest and report. It is also a good opportunity to clarify the individual roles of the people listed in the table, so that the reader doesn't have to jump to the other end of the report and look up roles manually in the "Document Properties" table on page two.
Primarily, I think it would be fairly straightforward to add the reviewer to this table of involved contributors.
My initial design is to keep using one table for the whole team and adding role descriptions ("Pentester", "Reviewer", "Approver") in a second line under their name in the left column. I've experimented with italic font style for the role label, but other styles may work as well.
I anticipate the need to change the format for the
<reviewers>list inreport.xmlsince each<reviewer>would need a name and biography field instead of purely a name.The most problematic edge case I can think of is if one person fulfills roles in more than one category to avoid multiple entries in the table for one person.