Economic development asks the analyst to generate every possible email permutation for a target firm and mail all of them. What is the PORP-aligned response?
Select an answer to reveal the explanation.
Short Explanation
Spray-and-pray is junk mail with a lab coat. OSINT picks addresses already sitting on pages and filings. If it is not published, it is not a collected email—it is a guess you then used as a weapon.
Full Explanation
When economic development asks the analyst to generate every possible email permutation for a target firm and mail all of them, the PORP-aligned response is to decline guess-and-send and instead collect addresses already published on pages, filings, and documents. High-volume guessing is mailbox probing, not open-source collection, and it can trigger spam filters, abuse complaints, and ethics review against the city. Running the spray because stakeholders label it “OSINT” does not transform intrusive testing into passive collection of published facts. SMTP user probes against the firm’s mail server are active infrastructure reconnaissance outside standard civic OSINT deliverables and may require separate authorization even inside IT security. Registering throwaway domains and impersonating the firm to harvest replies is social engineering incompatible with authorized municipal purpose. Exam caveat: PORP draws a bright line between harvesting published contacts and inventing-then-testing addresses under an economic-development banner. Operational check: search staff pages, PDFs, press, registries, and WHOIS-public fields; cite each found address with source and date; explain in writing why permutation mailing was refused; and offer stakeholders a published-contact inventory rather than a spray campaign.