POLICIES & ENGAGEMENT
Consulting Disclaimer
Scope, evidence and limits of cybersecurity advice.
Advice depends on scope
A consultancy finding reflects the agreed systems, evidence, access, methods and assessment period. Findings can be limited by incomplete inventories, unavailable logs, exclusions and sampling. Reports should distinguish confirmed findings from assumptions and record material limitations.
Testing authorisation
Penetration tests and disruptive validation require written authorisation, confirmed asset ownership and rules of engagement. Approval from a client does not automatically authorise testing a third-party platform. Targets, testing windows, stop conditions, incident escalation and evidence handling must be agreed before work starts.
Implementation decisions
Recommendations require client review for business impact, dependencies, licensing and regulatory needs. Changes should be tested, backed up and approved with rollback plans. RASPTECHNOLOGIES does not assume authority to change production systems merely by providing advice.
Compliance and assurance
An Essential Eight review is an assessment against an agreed framework and evidence set, not ASD certification. Compliance depends on the organisation’s obligations and ongoing controls. Advice is not a legal opinion, audit opinion or regulator approval unless an appropriately qualified and expressly agreed service provides that outcome.
Availability and continuing responsibility
Monitoring hours, response targets, maintenance and ongoing reassessment exist only where agreed in writing. A completed assessment is a point-in-time review; the client retains operational decision-making responsibilities. Active incident support requires an agreed engagement and availability confirmation.
Professional care and rights
These scope limits do not excuse a failure to exercise the care required by the agreed services or applicable law. Statutory rights remain intact. Discuss reliance, intended recipients and any necessary clarification with [email protected] before using a report outside its agreed purpose.
Australian context: ACCC consumer guarantees and ACCC contract guidance. Sources checked 11 October 2026. Applicability depends on the transaction and organisation.
