# Authorized assessment learning template

Use fictional facts only. This document does not authorize a test.

1. Purpose and written authorization: accountable owner, permitted systems and test accounts.
2. Rules of engagement: dates, methods, exclusions, data limits, emergency contact and stop conditions.
3. Finding: expected behavior, observed behavior, minimal synthetic evidence and reproducible context.
4. Validation: tool limitations, patch/configuration evidence and unresolved assumptions.
5. Consequence and priority: affected business objective, exposure and existing safeguards.
6. Remediation: recommended correction, owner and dependencies.
7. Retest: forbidden action is denied and legitimate use still works; record date and limits.
8. Cleanup and delivery: remove agreed test artifacts, preserve operational logs and restrict report recipients.