A city proposes measuring engagement success solely by how many critical findings were produced. How should the tester reframe success?
Select an answer to reveal the explanation.
Short Explanation
A pile of red badges is not the same as a useful assessment. Success is clear coverage, honest residual risk, and guidance that actually helps the city get safer.
Full Explanation
Quality engagement outcomes emphasize methodological coverage of scope, well-supported findings, actionable remediation, and transparent residual risk. Inflating critical counts as a vanity metric distorts priorities and can damage trust. Clients are better served by accurate severity, clear narratives, and measurable hardening advice. Testers should align success criteria with risk reduction rather than volume of alarming labels.