> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/penetration-testing/management/audit-definitions.md). # Audit Definitions Audit definitions allow you to create reusable templates for your penetration tests and ensure comparable results across multiple audit runs. *** Navigate to **Penetration Tests** → **Audit Definitions** to show a list of all audit templates. If you have not created an audit template yet, this view is empty.

The [audit definition overview](#audit-definitions-overview) provides information such as: * when an audit definition was created and last modified. * whether and when an audit is scheduled to run automatically. * which audits have already been performed based on an audit definition. * which Hacktor was used to perform a penetration test on which target systems. You can also [add new audit definitions](#add-audit-definition) and [start a penetration testing audit](#start-penetration-testing-audit). *** ## Navigation Click the **Search** field above the list and enter any search term to find specific list items. Scroll down the list or adjust the number of results displayed per page: ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation controls: ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between multiple pages. ### Filtering the List Click the search bar above the list to expand all available filters and filter the list by predefined parameters.

Available Filters

Parameter	Type	Description
Authentication Provider	String	Filter by a specific authentication provider or exclude it from the results. All available authentication providers are shown.
Scheduled Execution	Boolean	Filter based on whether a scheduled execution has been configured for an audit definition or not. The following values are available: True: The audit definition includes the scheduled execution of a penetration test. False: The audit definition does not include the scheduled execution of a penetration test.
Hacktor	String	Filter by a specific Hacktor or exclude it from the results. All available Hacktors are shown.
Target Systems	String	Filter by a specific target system or exclude it from the results. All available target systems are shown.

### Sorting List Items Click the **Sort** icon next to a column name in the table header to sort by that column in ascending order or descending order . ### Further Actions for List Items The following additional actions are available for each list item:

Action	Description
Start Pentesting Audit	Click Start Pentesting Audit to open a new window in which you can configure additional options and start the audit.
Edit	Click the Edit icon to open the edit view of the respective audit definition.
Delete	Click the Delete icon and confirm the prompt by clicking Delete Permanently to remove the audit definition. Please note: Deleted audit definitions cannot be recovered.

*** ## Audit Definitions: Overview The audit definition overview is structured as a table.

The following information is shown:

Column	Description
Name	Shows the custom name of the audit definition and an additional description, if provided. The date and time of creation and last edit are also shown. If you have configured a scheduled execution, the time, days of the week, and time zone of the scheduled execution are also shown. Click the name of an audit definition to navigate to the respective edit view. Here you can adjust configured settings and delete the audit definition.
Related Audits	Shows a list of all audits performed based on the respective audit definition and the calculated risk score (Risk) for each audit. The Delta of the calculated risk score compared with the previous audit run is also shown: : The risk score has increased. : The risk score has decreased.
Hacktors & Target Groups	Shows the Hacktor that is assigned to the respective audit definition, the assigned target groups, and the assigned custom auth-providers. Click the name of a Hacktor, target group, or provider to navigate to the respective edit view.

Column

Description

Name

Shows the custom name of the audit definition and an additional description, if provided. The date and time of creation and last edit are also shown.

If you have configured a scheduled execution, the time, days of the week, and time zone of the scheduled execution are also shown.

Click the name of an audit definition to navigate to the respective edit view. Here you can adjust configured settings and delete the audit definition.

Related Audits

Shows a list of all audits performed based on the respective audit definition and the calculated risk score (Risk) for each audit.

The Delta of the calculated risk score compared with the previous audit run is also shown:

: The risk score has increased.
: The risk score has decreased.

Hacktors & Target Groups

Shows the Hacktor that is assigned to the respective audit definition, the assigned target groups, and the assigned custom auth-providers.

Click the name of a Hacktor, target group, or provider to navigate to the respective edit view.

*** ## Adding an Audit Definition Click **Create Audit Definition** in the upper-right corner to [add a new audit definition](/docs/manual/english/platform-usage/penetration-testing/management/audit-definitions/add-audit-definition.md). *** ## Audit Definition: Edit View Click an entry in the list to navigate to the respective edit view. Here you can adjust [configured settings](/docs/manual/english/platform-usage/penetration-testing/management/audit-definitions/add-audit-definition.md#general-settings) and delete the audit definition. You can also find an overview of all audits that have already been performed based on the respective audit definition. The following actions are available:

Option	Description
Save Changes	Click Save Changes after adjusting any settings. Please note: Unsaved changes cannot be recovered.
Back	Click Back to return to the list overview.
Remove	Click Remove, then confirm the prompt that appears to delete the object that you are editing. Please note: Deleted objects cannot be recovered.

### Audit Runs: Overview As soon as an audit has been performed based on the respective audit definition, the **Related Audits** section appears in the audit definition's edit view. It is structured as a table.

The following information is shown:

Column	Description
Name	Shows the automatically assigned name of the completed audit. The date and time when the audit was performed is also shown. Click the name of an audit to navigate to the respective audit detail view.
Risk Score	Shows the risk score calculated for the audit. For more information on how the Enginsight-specific risk score is calculated, see our Knowledge Base: How is Enginsight's own risk score calculated?

Column

Description

Name

Shows the automatically assigned name of the completed audit. The date and time when the audit was performed is also shown.

Click the name of an audit to navigate to the respective audit detail view.

Risk Score

Shows the risk score calculated for the audit.

For more information on how the Enginsight-specific risk score is calculated, see our Knowledge Base: How is Enginsight's own risk score calculated?

*** ## Starting an Audit This window is only shown when you click **Start Pentesting Audit** at the end of a list item in the audit definition overview.

The following options are available:

Option	Description
Alias	Enter a custom display name for the audit. This field is optional.
Audit Definition	Select the audit template that should be used for the audit. The default audit definition corresponds to the list item for which you clicked Start Pentesting Audit. Click the Audit Definition field to expand a list of all available audit templates, and select an audit definition. Click the Remove icon next to an audit template to remove it from the list.
I am authorized to perform this scan	Enable this option to confirm that you are authorized to audit the selected target groups. Please note: For data protection reasons, penetration tests may only be performed by authorized persons. Any violation may have legal consequences. Please also read our Terms and Conditions. Please note: This is a required field. The audit can only be started after you confirm that you are authorized to perform the penetration test. Select or deselect the checkbox next to the option to enable or disable it.

Option

Description

Alias

Enter a custom display name for the audit.

This field is optional.

Audit Definition

Select the audit template that should be used for the audit.

The default audit definition corresponds to the list item for which you clicked Start Pentesting Audit.

Click the Audit Definition field to expand a list of all available audit templates, and select an audit definition.

Click the Remove icon next to an audit template to remove it from the list.

I am authorized to perform this scan

Enable this option to confirm that you are authorized to audit the selected target groups.

Please note: For data protection reasons, penetration tests may only be performed by authorized persons. Any violation may have legal consequences. Please also read our Terms and Conditions.

Please note: This is a required field. The audit can only be started after you confirm that you are authorized to perform the penetration test.

Select or deselect the checkbox next to the option to enable or disable it.

Click **Start Pentesting Audit** to start the audit based on the selected audit definition. *** ## Further Resources **Knowledge Base** * [How is Enginsight's own risk score calculated?](https://docs.enginsight.com/docs/knowledge-base/english/risk-scores/how-is-enginsights-own-risk-score-calculated) ***