Which of the following provides the details about the terms of a test with a third-party penetration tester?

The rules of engagement (ROE) document outlines the scope, limitations, authorized techniques, communication protocols, and reporting requirements for a penetration test conducted by a third party. It ensures all parties understand the boundaries and expectations of the test. Supply chain analysis focuses on risks within a company's supply chain, not the terms of a penetration test. A right to audit clause grants the right to inspect records, which is different from defining the terms of a security assessment. Due diligence is the process of exercising reasonable care before entering into an agreement or making a decision; while related to hiring a pen tester, it doesn't specifically detail the terms of the test itself.