How we scope, timelines, and access.
What to expect during testing and mitigation approach.
Report structure, sample report availability.
Scheduling, points of contact, NDA and data handling.