CAAP
Authorized Assessment Program
- Signed Rules of Engagement define authorized targets and window.
- Active testing never touches Purdue L0–L2 without explicit authorization.
- Deliverables: technical report, evidence package, risk register, legal appendix.



