(Section by Carlene Turner)
SANS Technology Institute has published a comprehensive SWAT checklist for securing web applications technologies (https://www.sans.org/security-resources/posters/securing-web-application-technologies-swat/60/download). The section of the list that applies to use of ethical hacking to test an organization’s system is listed below in the picture.
Self-Test Organization’s Web Vulnerability