Before starting
Objective
Which question needs to be solved: exposure, OSINT, AI risk, full mapping or advisory.
Scope
Brand, domains, geographies, business units or systems that matter most.
Constraints
Legal, reputational, time or confidentiality boundaries.