Follows an authorized penetration test through scoping, reconnaissance, testing, evidence collection, risk rating, reporting, cleanup, and remediation verification.