Establish di mandate
Wi staat wid di decision yuh need fi mek. Objectives, stakeholders, critical activities an constraints define how useful work ago look.
A shared andastandin a di kweschan.
A clear mandate. A method weh dem consider.
Each engagement follow a disciplined path fram di question yuh face to evidence yuh can act pan.
Define di boundaries
Scope, authorisation, exclusions, access an information handling are agreed. Fi active testing, di rules dem also define timing, escalation an stop conditions.
An explicit scope an clear responsibilities.
Examine di evidence
Research, review or testing follows di agreed question. Significant findings dem communicate thru di agreed channel; assumptions an limitations dem record.
Evidence wid context an confidence.
Mek di findings dem useable
Wi present di implications fi di business alongside di technical detail. Findings dem prioritize so dat di reasons fi di proposed next steps dem clear.
Decisions, priorities an actionable deliverables.
Support di next step
Wi agree how questions, remediation or further verification ago be handled. Follow-up have an explicit scope, so dat responsibility remain clear afta restitution.
An agreed path fram recommendation to action.
Principles weh hold throughout.
An adversary’s perspective
Staat wid how a weakness coulda be used, not only wid weda a control exist.
Expert judgment
Explain di reasoning behind a recommendation an di limits a di evidence weh support it.
Discretion by design
Agree access, information handling an points a contact before an engagement staat.
A useful conclusion
Lef decision-makers an technical teams wid a shared understanding a di next action.
Find di path before di attacker do it.
Tell wi which assets matter most. Wi ago define di offensive assessment, di research priorities an di decisions dem weh yuh organization need fi mek.