# Sample Assessment Authorization Language

> **Notice:** This document is a sample operational authorization template, not legal advice. Organizations should adapt it in consultation with qualified legal counsel.

This document contains sample scope and authorization clauses for inclusion in Statements of Work (SOW), Master Services Agreements (MSA), or Assessment Authorization letters prior to physical site walks.

---

## 1. Single-Sentence Fast-Path Clause (Recommended for SOW Schedule A)

> *"Client explicitly authorizes the assessment team to perform non-invasive, passive radio frequency (RF) credential reads and non-intrusive passive physical network port link detection during the inspection to verify vendor hardware installation specifications."*

---

## 2. Expanded Scope & Non-Destructive Warranty Clause (Full Legal SOW Addendum)

For engagements requiring formal legal department sign-off, use the expanded text below:

```markdown
Section X: Physical Control Specification Verification (APCAF Testing)

X.1 Authorization & Scope:
Client explicitly authorizes the Assessor to perform non-destructive, passive verification of physical access control hardware specifications within designated scoped facilities. Testing is strictly limited to:
  (a) Contactless, passive radio frequency identification (RFID/NFC) protocol inspection to determine credential encryption standards;
  (b) Visual alignment, latch throw verification, and gap dimension inspection of perimeter barriers and interior secure zone doors;
  (c) Passive physical layer (Layer 1/2) network drop link-state testing via non-transmitting test instrumentation.

X.2 Zero Operational Impact & Fire-Safety Integrity:
All APCAF inspections are strictly non-invasive. The Assessor shall not:
  (a) Transmit malicious network packets or establish unauthenticated Layer 3 connections;
  (b) Modify, bypass, disassemble, or interfere with active life-safety, fire alarm, or emergency egress hardware;
  (c) Employ mechanical lock-picking, destructive entry, or credential cloning/replay devices.

X.3 Output & Defect Reporting:
Findings from this inspection shall be documented as a "Vendor Installation QA Scorecard" to assist the Client in validating vendor contract specifications and warranty obligations prior to final installation acceptance.
```

---

## 3. Pre-Engagement Checklist for Assessors

- [ ] Fast-path consent clause integrated into client-signed engagement letter.
- [ ] Emergency contact and physical security manager point-of-contact documented.
- [ ] Escort protocol confirmed (audit walk conducted with authorized client representative).
- [ ] Client legal/procurement lead notified that findings can be used as vendor warranty punch list items.

---

> **Notice:** This template is provided for informational and standardisation purposes only and does not constitute legal advice. Clauses should be reviewed by qualified legal counsel against applicable contracts and local jurisdiction.