Define authorized scope
Register assets and record the boundaries and permissions for the assessment.
WORKFLOW
Clear scope.
Careful conclusions.
A repeatable path through the work, with evidence at every handoff.
Collect and organize evidence
Use supported inputs and configured assessment workflows. Retain provenance and distinguish observations from verified findings.
Investigate and review
Review evidence, record confidence and rationale, and track remediation with human oversight.
Report with context
Carry sources, conclusions and limitations into the report. Use release evidence to assess deployment readiness separately.