Throughout active testing the testers report at least weekly to the control team and test managers, and the threat intelligence provider stays available. The control team provides leg-ups designed from the test plan in good time, adding or adapting them only with test manager approval. If staff or providers detect the test, the control team, with the testers, proposes measures to continue while preserving secrecy for test manager validation. In exceptional circumstances threatening data, assets or disruption of critical functions, providers, counterparts or the sector, the control team lead may suspend the test or, as a last resort and with prior authority validation, continue through a limited purple teaming exercise, which counts toward the 12 week minimum.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.