You suspect that system administrators In one part of the target organization are turning off their systems during the times when penetration tests are scheduled, what feature could you add to the '…

An unannounced test addresses the notification issue but does not guarantee systems will be online after hours when administrators might still be present during a business-hours test.

Informing response personnel of the exact test time gives administrators advance warning, enabling them to continue the practice of shutting systems down before the test begins.

Testing systems after normal business hours removes the ability of on-site administrators to manually power down or isolate their systems when they know a test is occurring, because they will not be present to intervene. Including this provision in the Rules of Engagement ensures that all target systems remain accessible and assessable regardless of administrative awareness of the test schedule. It directly closes the evasion loophole created when staff can react in real time to a known test window.

Limiting tests to business hours guarantees administrators are on-site and available to shut down systems, making the problem worse rather than addressing it.