What we clarify

Critical assets, current risk, allowed testing methods, constraints and expected output. From there we define an assessment, operation or retainer scope.