## Aprroach
Initial Scoping
Wakefield Security will work with the customer to identify the type of engagement you require, the systems that are in-scope and the testing timeframes.
Statement of Work
The customer will be sent a statement of work which outlines the testing that will be conducted, estimated timeframes, scheduled dates and the costs for the engagement.
Engagement Initiation
Upon either verbal agreement, or signing of the statement of work, the engagement will commence. Testing requirements that were requested should be provided to Wakefield Security at this stage.
Penetration Testing
Wakefield Security will perform testing using industry recognised testing methodologies to deliver the outcome of the engagement. Any high-risk issues that are identified during the course of testing will be escalated to the project owner as soon as they are discovered. This allows for both prompt resolution and the ability for the client to react quickly and resolve a risk before it becomes an incident.
Project Management
If agreed with the customer, project management resources may be brought in to ensure testing requirements have been provided, activities are tracked and the overall project status reported upon.
Integration with Bug Tracking
As an optional extra, Wakefield Security can integrate with your bug tracking system (e.g. Jira) to lodge security issues as they are identified.
Report Delivery
A report will be delivered to the customer outlining the findings from the Wakefield Security engagement
Follow-up Meeting
If requested by the client a follow up meeting can be scheduled to go over the findings, often with the developers in attendance. This service is provided free of charge.
Feedback and Continuous Improvement
A feedback survey will be sent to capture the customers overall experience with Wakefield Security from engagement start to end.
Invoicing
Wakefield Security will invoice the customer for the work undertaken.