Question 42.

For the Designated Network, submit a copy of the most recent internet-facing penetration testing summary report. If the testing summary report contains IP addresses or any other identifiable information that is considered confidential or of a sensitive nature, for example, a host name and the specific vulnerability associated with that host name, please redact such information.

If you do not have evidence of the most recent internet-facing penetration testing summary report at the time of application, please address in the project plan required in Part VI of this application how you will fulfill this obligation prior to conformance testing.