Testing security products is such an important activity that testers need to be responsible and:
1. Explain what they plan to do
2. Follow their plan, without deviating
3. Be prepared to prove that they didn't deviate
It's why we follows the AMTSO testing Standard
