Security assessment preparation

Use this before your first discussion.

• List critical business services and their technology owners.
• Identify applications, domains, infrastructure and environments proposed for assessment.
• Confirm ownership and written testing authorisation.
• Document exclusions, permitted methods and testing windows.
• Name escalation contacts and stop conditions.
• Agree report recipients, remediation owners and retest requirements.

This checklist helps organise a scoping conversation. It is not a substitute for a tailored assessment or professional advice. Please use an agreed secure channel for confidential records.