Define penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.