The standard phases of an ethical hacking engagement, and why the 'ethical' part is the actual foundation, not a footnote.