How does Just Culture fit in with a pen test according to MIAUW?

A pen test can affect the behavior of employees, administrators or suppliers. MIAUW requires that a finding be substantiated with evidence, scope and context. A report should therefore describe observable facts and consequences and not attribute intentions or personal culpability without investigation.

Just Culture helps use the outcome for recovery: which technical or organizational conditions made the problem possible, which measure reduces recurrence and who owns that measure? If individual action appears to be appropriate, this requires a separate and fair process; a pen test score alone is not proof of this.