What document describes the specifics of the testing, the associated violations, and protects both the organization's interests and your liabilities as a tester in the case that a private firm employed you as a Certified Ethical Hacker to conduct an external security assessment using penetration testing?

A Rules of Engagement

explanation