The length of the penetration testing engagement depends on the type of testing, the type and number of systems, and any engagement constraints. Typical engagements have an average testing time of 2 – 4 weeks.