Build an assessment brief

Start with a brief.
Get a clearer proposal.

A little context helps define the right coverage, effort and deliverables.

The decision

What will this work help you do: release a product, answer a customer, prepare an audit or reduce a known exposure?

List applications, APIs, environments, IP ranges, cloud accounts or processes. Include roles and important workflows.

Explain the available documentation, test accounts, connectivity and points of contact.

Share the release, audit or review date and any constraints on assessment windows.

Identify the people who need to use the report and the evidence or format they expect.

Agree how remediation questions, retesting and closure evidence should be handled.