# External Exposure Assessment — 45-minute handover

**Synthetic worked example — not customer evidence.**

1. 5 minutes — decision, authority, and accepted scope.
2. 8 minutes — what was checked and completion status.
3. 5 minutes — what was not checked, including failures, exclusions, and unknowns.
4. 15 minutes — findings, evidence, remediation, and ownership.
5. 5 minutes — manifest, hashes, and receipt/verifier boundary where produced.
6. 5 minutes — focused retest and next-step recommendation.
7. 2 minutes — factual corrections and closeout.

Do not state that the target is secure, compliant, complete, accepted, certified, attested, or vulnerability-free.