Scenario and scope brief
Agreed audiences, channels, boundaries, objectives, and measures.
Offensive Security
Social Engineering
Spot the deception.
Strengthen the response.
Use realistic, agreed scenarios to understand how your people recognize, verify, and report suspicious requests. Turn observations into stronger everyday habits.
IRON FIST LABS / 04Offensive Security
01 / THE CHALLENGE
A believable request can bypass a strong defense.
A convincing request can bypass a technical defense. Urgency, impersonation, and familiar workflows can make a fraudulent action look routine.
02 / WHAT YOU RECEIVE
Expertise you can
put to work.
A clear handoff for the people making decisions and the people delivering the work.
Campaign observations
Documented responses, reporting behavior, and verification opportunities.
Focused improvement plan
Recommendations for coaching, procedures, and approval workflows.
Stakeholder debrief
A practical review that connects observations to everyday business decisions.
Your proposal confirms the deliverables, scope, responsibilities, and schedule for your engagement.
03 / HOW WE WORK
A clear path.
From start to next steps.
Agree the boundaries
Choose audiences, scenarios, approved methods, and data-handling expectations.
Run the scenarios
Deliver agreed email, phone, or physical scenarios within the authorized scope.
Review the response
Examine recognition, verification, escalation, and reporting.
Strengthen habits
Translate findings into practical coaching and workflow improvements.
A STRONG START
Bring the context.
We’ll shape the plan.
You do not need every answer before getting in touch. These details help us scope the work.
A useful starting point
Relevant workflows, approved audiences, channels, and employee reporting practices.
The right people
A business sponsor, security or IT lead, and relevant HR or department representatives.
What shapes the engagement
Audience size, scenario complexity, channels, campaign duration, and reporting boundaries. We agree timing after reviewing these factors.
SEE THE SHAPE OF THE WORK
From observation
to next action.
A short example of how we make findings useful. The final format and depth depend on your agreed engagement.
Discuss your deliverablesILLUSTRATIVE EXAMPLE01 / BRIEF
Example workflow observation
Fictional scenario. Not a client result or a completed assessment.
- Focus
- An urgent payment-change request
- Observation
- A fictional scenario exposes uncertainty about independently verifying bank-detail changes.
- Recommended next step
- Define a trusted callback procedure and coach the teams responsible for payment approvals.
CONTEXT → OWNERSHIP → ACTION
04 / BEFORE WE BEGIN
A little clarity.
A better start.
Which channels can be assessed?
Email, phone, and physical scenarios can be considered. We choose appropriate methods and confirm authorization before work begins.
How do you handle employee results?
We agree reporting and data handling in advance, with a focus on improving business processes and learning.
Is training included?
A findings debrief is part of the proposed assessment package. Dedicated training can be scoped separately.
LET’S DEFINE THE RIGHT ENGAGEMENT
Start a conversation.
Make your next
move clearer.
Tell us what prompted your search, what matters to your business, and any deadline. We’ll help define the right scope.
What happens next
- We review your priorities.
- We discuss the right scope with you.
- You receive a clear proposal before work begins.
START A CONVERSATION
Tell us what you need.
A clearer picture. A practical next step.
Tell us what you’re working on.
We’ll use your details to respond to your request. Please leave out passwords and sensitive incident evidence. Privacy policy.
Prefer email?info@ironfistlabs.com