Scope.
Scope, deliverables and price are agreed in writing before work starts.
We establish what is being built or tested, which systems are in scope, what information matters and any regulatory or operational constraints.
How an engagement works.
Scope, delivery and remediation, and who is accountable for the result. The structure is the same whether we are building a system or testing one.
Delivery.
Engineering work moves through design, build and production. Security work moves through reconnaissance, testing, validation and reporting.
Evidence and technical decisions are recorded during the engagement rather than reconstructed at the end. Findings are manually verified before they are reported.
Remediation.
Where remediation forms part of the engagement, we either implement the changes or provide the engineering detail your team needs to do so.
Security findings included for verification are re-tested once the fixes are deployed.
Who is accountable?
The person involved in scoping remains involved in delivery.
The aim is to keep commercial context and technical context together rather than transferring the engagement through separate sales, project and delivery teams.
info@blackshard.com.au
Australia-wide, from our Brisbane head office. Open a brief.