A useful assessment begins with a clear question. Identify the business decision you need to make, the systems involved and the people who can explain how they work. Document what is included, what is excluded and how evidence can be shared securely. A marketing enquiry is not the place to send passwords, detailed vulnerabilities or private system records. Before any technical activity begins, agree permissions, contacts, timing and expected outputs with your provider.