ROE Red Lines Battle Deck
Recall and apply common rules-of-engagement red lines during test execution.
The client says: "Just try the credential quickly." Live credential pressure A discovered password appears valid for an asset not explicitly approved for login testing. Your line I found a credential exposure. Before using it, I need approval for the target, method, and stop rule. Using it because the client sounded informal. It separates finding the secret from using the secret, which are different risk decisions. Proceed or pause when the asset is adjacent to scope? Scope boundary Pause unless the ROE already includes that asset class. STOP What does STOP mean at a red line? Which actions almost always…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in