Penetration Testing Scoping and Engagement Methodology.