The shaping of scope for an offensive security engagement is the determination of what will be assessed and when it can happen between the customer and the assessors. These two attributes are closely tied to each other, and constraints on one will affect the feasibility of the other. Shaping the “what” of the assessment scope is driven largely by the perceived or actual needs of the customer. The “when” refers to the schedule and window for assessment, and is affected by the availability of resources. Resource limitations impacting the “when” of assessment are typically financial in nature ...
4. Shaping
Get Professional Red Teaming: Conducting Successful Cybersecurity Engagements now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.