# Assessment scope canvas

Agree assets, roles, boundaries and the result you need.

**Original community working document · Version 1.0 · 16 October 2026**

Use placeholders below for a scoped discussion. Do not store credentials, private client records or sensitive evidence in this document. Reference an approved private location instead. This is a starting point, not an official framework document, audit opinion, certification or legal advice.

## Purpose

- **Decision this review supports**
  - [Complete with scoped, non-sensitive information.]

- **Named sponsor and technical owner**
  - [Complete with scoped, non-sensitive information.]

- **Expected outputs and acceptance criteria**
  - [Complete with scoped, non-sensitive information.]

## Authorized scope

- **In-scope assets and environments**
  - [Complete with scoped, non-sensitive information.]

- **Authorized test identities and roles**
  - [Complete with scoped, non-sensitive information.]

- **Written authorization reference**
  - [Complete with scoped, non-sensitive information.]

- **Explicit exclusions and third-party dependencies**
  - [Complete with scoped, non-sensitive information.]

## Execution

- **Permitted activities and prohibited techniques**
  - [Complete with scoped, non-sensitive information.]

- **Test window and escalation contacts**
  - [Complete with scoped, non-sensitive information.]

- **Stop conditions and incident route**
  - [Complete with scoped, non-sensitive information.]

- **Evidence-handling and deletion requirements**
  - [Complete with scoped, non-sensitive information.]

## Close-out

- **Finding-review process**
  - [Complete with scoped, non-sensitive information.]

- **Retest scope and criteria**
  - [Complete with scoped, non-sensitive information.]

- **Handover owner and date**
  - [Complete with scoped, non-sensitive information.]

## Review and ownership

- Prepared by: [Name / role]
- Reviewed by: [Name / role]
- Version and review date: [Version / date]
- Adaptation notes: [What changed and why]

## Use and attribution

Original draft prepared for Abdullah Bin Zarshaid’s personal community library. Licensed under CC BY 4.0: https://creativecommons.org/licenses/by/4.0/ . You may adapt this original document with attribution. No third-party standard text or employer/client material is included. Assess suitability for your own scope.