Assess the need for coordinated testing and simulation
Fortra’s Offensive Security Advanced Bundle is documented around Core Impact and Cobalt Strike. It addresses a different selection question from a scanning-led package: the organisation needs to evaluate how authorised testing and adversary simulation fit its assessment programme. Verify current package contents and licensing before treating a retained bundle name as an order specification.
Define the security questions, operators and approved environments. The existence of advanced tooling does not establish the team’s readiness to use it safely or authorise activity against systems outside the agreed boundary. Training, operational controls and evidence handling belong in the decision.
Define distinct objectives for each exercise
A pilot or demonstration should use a controlled setting and remain at the level authorised by the customer. Agree what evidence would show that the testing workflow supports remediation and what evidence would show that a simulation meaningfully exercises defensive response. Avoid combining these into an undefined promise of complete security assurance.
Handover should document licence ownership, supported versions, operator enablement and the rules for any later assessment. Compare existing entitlements so procurement does not duplicate tools already held. MMC can scope package selection and related services; actual testing, simulation, cleanup and retesting must be separately specified with asset-owner approval.
Evidence to request for this scope
- Obtain the current component, licence and training-entitlement schedule for the Advanced package.
- Agree controlled evaluation objectives and written boundaries before any technical exercise.
- Distinguish validation, defensive-response review and remediation reporting in the acceptance plan.