Worksheet

First security engagement chooser

A single page decision sheet. The top block asks four yes or no questions: source held, system live, launch or handover within a quarter, vendor consent to test. The middle grid maps each pattern to review, test or both. The bottom block lists scope notes, the modules to review, the environments to test and the report format you require, such as a PDF plus a spreadsheet of findings.

Name: ______________________   Business: ______________________   Date: ______________

Scroll the table sideways to see every column.

Cross out or rewrite any heading that does not fit your business. From the guide “Secure code review or penetration test: which to buy first”, www.gullysystem.com/blog/secure-code-review-or-penetration-test-which-to-buy-first