ethical hacking what skill is most important when developing a written agreement between a security professional and a company that will be hiring them to execute a security assessment?