Identifying Devices for Investigation
It is important to understand which areas of an organisation and its facilities and when in the project lifecycle they should be examined to ensure that the effort and exposure are commensurate. We try to cover this in our methodology in an elimination process as well as placing restrictions on the type of equipment and devices we will report on if we feel that no benefit will accrue with the investigation. As an example we are often asked to examine an organisations vehicle fleet. We no longer include a list of vehicles in the inventory because although we know of 9 vehicles (4 motor cars and 5 trucks) whose engine management systems are affected, after discussion with the manufacturers we are satisfied that they are aware of the problem and a "patch" is applied when the vehicle is serviced. Another view is that if you don't take your car for a service before the year 2000 you deserve a midnight "surprise"! Suffice it to say that there are more than enough critical areas to examine without wasting good time and money with misguided effort.