[Autogenerated] So, actually, although people might think this is a really,
you know, disruptive exercise, I mean,
5 to 10 days on site doesn't sound like a lot.
I mean, you must be pretty productive when you're ideally.
Yes.
I mean, ideally, get to the end of the day,
get back to my hotel a sort of collapse on the bed because I've been,
you know,
on all day trying to learn about the organization and ask
good questions and understand what's happening and
gathering as much evidence as we can.
And you're trying to move very quickly.
Can we diagnose problems?
And Pharrell rules?
Can we look at server configured and see where issues have gone awry?
And we think about the ramifications of what's in
the vulnerability scan output eso.
In the best case scenario, they are very high impact days,
and they are sort of taxing.
As a result, yours is a prep work beforehand,
So you just try to documentation reviews.
You try and get documentation clients before you get on site.
Yes, So I do.
I do two things that I think are very, very important prior to going on site one.
Obviously try to get as much documentation as we can try to
fulfill is many of the requests that we need.
Uh,
and lots of assessors have lots of different kind of request
management systems to gather some of that evidence.
The more of that you confront load the better.
Because then you're assessors spent more time asking intelligent and
focused questions rather than sort of tell you what you do.
Yeah, uh, the other thing I really,
really want to do relatively early on in the assessment is have
what I call a scope in architecture discussion,
usually over like a Web sharing session screen sharing session where we
can get there sort of technical people on the phone or the people who
can describe the environment on the phone and put up a topology diagram
and tell us about what happens.
This is what the environment is like.
This is what the data flows air like.
This is what's in the technology stack, and we can ask questions.
We can try to understand it, and we can sort of build.
Are are sort of mental picture of what's happening in the
environment prior to coming on site.
Yeah, I mean, I know is an ex successor.
The thing you're trying to do very quickly has learned somebody else's business,
right and learn their network and their infrastructure
before you can start doing an assessment.
Right on that.
I think one of the hardest jobs is an assessor.
It is tough because you expected to know it when you get there.
Right on going.
Of course You knew we have Secret Service.
Like, Yeah, I just Yeah, you're right.
It was in very tiny funds on this diagram.
That was very zoomed out, Yes.