Which of the following best aligns with the principles outlined in the OSS TMM when initiating a security test to ensure that it is effective, consistent, and repeatable?
Focusing solely on high-impact vulnerabilities to save time and resources.
Conducting covert testing without informing the IT department to simulate an actual attack.
Automating all test procedures to increase efficiency.
Establishing well-defined objectives and success criteria before beginning.