Timeline: start date, duration, report delivery date - Communication channels and frequency - Point of contact and escalation path - VPN credentials, test accounts, or other access provisions - Emergency stop procedure