A municipal sponsor starts treating 'number of pivots completed' as the engagement success metric instead of risk to crown-jewel systems. How should the tester recenter the work?
Select an answer to reveal the explanation.
Short Explanation
Pivots are a means of travel, not a trophy wall. Nobody cares that you took sixteen scenic hops if you never got near the systems that matter. Steer lateral movement toward the engagement goals and crown-jewel risk.
Full Explanation
Lateral movement and pivoting exist to advance authorized objectives such as reaching sensitive systems and proving realistic business risk. Counting hops or tunnels as a success metric encourages noise without insight. Testers should align technique selection with crown-jewel paths defined in scope and report impact in those terms. Tool tallies and indiscriminate hopping do not substitute for objective-aligned assessment.