Single Linux based web server available on the public Internet with and IP address of 90.33.30.10 and a DNS name of web1.widgets.com

Customer contact:

Stuart Melvin email stu@widgets.com phone 123.456.7890

Customer request:

Is the server vulnerable to any known attacks including the customer database available on the server? If so how are they fixed?

Note: vague information is normal when customers don't really know what they want.

Assignment:

Put together a proposal including statement of work (SOW), rules of engagement, clarifying questions to be asked at kickoff i.e. relevant compliance, production system, etc...

Determine contract type, i.e. Time and Materials (T&M) or fixed bid and cost.