A written agreement spelling out the scope of a penetration test by outlining what systems are to be targeted and explicitly giving permission to the tester to check systems for vulnerabilities is required before beginning work to protect the tester from any charges of unauthorized access to a protected computer.