A penetration test usually involves several steps. After defining the system that is to be tested and after the project kick-off, the first step is a comprehensive analysis of the infrastructure to be tested to identify potential points of attack. Then, various techniques and tools are used to find vulnerabilities. The results are documented and summarized in a report. The final report contains the identified vulnerabilities, their risk assessments, and the recommendations for measures to be taken.