SEC-04 · Security & maintenance
Written scope and authorisation; a report, not a security certification.