Parks leadership asks for an OSINT memo that lists conclusions only and skips the methods so it stays short. What should the analyst include?
Select an answer to reveal the explanation.
Short Explanation
Findings without methods are like a cake recipe that lists 'delicious' and skips the oven temperature. A peer—or next year's analyst—has to be able to bake it again. Professional OSINT reports say how each fact was found, not only what you decided.
Full Explanation
A professional OSINT report documents methodology so findings can be reproduced, challenged, and updated. When parks leadership asks for a memo that lists conclusions only and skips methods to stay short, the analyst should include a methodology section that states how each fact was found so a peer can re-perform the work. Findings without methods are unauditable civic products.
Conclusions only, because methods would let the vendor game the next review, sacrifice defensibility for secrecy theater. A methods section that lists unauthorized access steps used against the parks website documents out-of-scope attacks rather than PORP methods. Verbal methods in the hallway and a findings-only PDF prevent reconstruction of sources.
Exam caveat: methods can be concise (sources, operators, captures) without dumping every keystroke; brevity is fine, omission is not.
Operational check: add a short methods block naming public sources, operators, and captures for each conclusion; keep unauthorized-access steps out; and ensure a peer could rerun the work from the memo alone. Keep municipal wording calibrated to what public sources actually show, and record retrieval dates so peers can re-perform the work.