FortiRecon provides an adversary-oriented view of internal and external exposure, helps identify and prioritise attack-surface risk, monitors digital-brand abuse, and delivers curated threat intelligence from open, deep and dark-web sources.

Security teams should define monitored domains, subdomains, IP ranges, subsidiaries, executive identities, brands, vendors and required intelligence before selecting a FortiRecon bundle or asset quantity.

A quotation should identify the exact FortiRecon modules, licensed asset quantity, subscription term, optional services, implementation responsibilities and any required integrations rather than presenting a generic “FortiRecon licence.”

FortiRecon Digital Risk Protection Tanzania

FortiRecon Digital Risk Protection Tanzania is relevant to banks, telecom operators, professional firms, education organisations, health providers, insurers, retailers, hospitality groups, logistics businesses, NGOs, government-related entities and enterprises whose digital footprint extends beyond one office network. A Tanzanian organisation may have public websites, cloud applications, internet-facing services, remote-access systems, supplier portals, customer-facing domains, social-media identities and third-party technology providers spread across several locations. Traditional network controls can protect traffic that reaches the corporate environment, but they do not automatically show every asset or impersonation that an attacker can discover externally. FortiRecon can provide that wider view through attack-surface monitoring, digital-brand protection and threat intelligence.

For procurement in Tanzania, start with scope rather than product name. List the domains and public IP ranges the organisation controls, any subsidiaries or acquired brands, critical executives whose identity abuse would create material risk, and vendors whose exposure must be watched. Decide whether the project is mainly about discovering externally exposed assets, whether phishing and brand impersonation are major concerns, or whether the security team also needs contextual adversary intelligence. Those answers help determine the FortiRecon modules and monitored-asset quantity that should appear in the quotation. They also prevent the purchase from being undersized because the organisation counted only its main website while ignoring cloud services, subdomains and public infrastructure.

Operational ownership is equally important. Tanzania-based teams should define who will investigate a newly discovered public service, who can authorise a takedown request, who resets leaked credentials, who owns public-cloud misconfiguration and who tracks remediation to closure. If the organisation already runs FortiGate firewalls, SIEM, SOAR or other security tools, the FortiRecon project should document how findings will connect to those workflows. A useful quotation request should include approximate monitored assets, required modules, subscription term, integrations, expected reporting, implementation assistance and any multi-country scope. FourTeck Tanzania can use those inputs to structure a more precise commercial and deployment discussion instead of quoting an undefined “FortiRecon licence.”

FortiRecon Digital Risk Protection Dar es Salaam

FortiRecon Digital Risk Protection Dar es Salaam can support organisations whose internet exposure grows quickly as new offices, cloud applications, outsourced services and customer portals are added. Businesses in a major commercial centre often have more public digital assets than their internal inventories show. Marketing teams register domains, developers publish test systems, cloud projects create public endpoints and suppliers operate externally accessible services on the organisation’s behalf. An attacker does not care which department owns the asset; any exposed weakness can become an entry point. FortiRecon Attack Surface Management is designed to discover and monitor that outside-in footprint so security teams can identify what is visible and prioritise issues that deserve remediation.

Brand abuse can be a separate risk for companies that interact with customers online. A fake login page, typo-squatted domain, rogue application or social-media impersonation may never touch the company firewall, yet it can still steal credentials, damage trust or mislead customers. FortiRecon Brand Protection is designed to monitor those external signals and, for qualifying cases, support takedown workflows. For a Dar es Salaam bank, retailer, travel company, insurer, delivery platform or service brand, that capability should be planned with legal, marketing, fraud and security teams rather than owned by the SOC alone.

When requesting a FortiRecon quotation in Dar es Salaam, provide the number of primary domains, major subdomains, public IP ranges, brands, subsidiaries and critical executive identities that may require monitoring. Explain whether the security team uses a SIEM, SOAR or ticketing platform and how alerts should be handled. If the organisation is also reviewing its edge security, the FortiGate 30G Tanzania page provides an example of how firewall procurement can be documented around licensing and deployment assumptions. FortiRecon and a firewall solve different problems, but a coordinated security architecture should connect external exposure discovery to the controls that remediate or contain the risk.

FortiRecon Digital Risk Protection Mwanza

FortiRecon Digital Risk Protection Mwanza can be valuable for branch-led organisations that centralise security decisions but operate public services and internet connectivity across several locations. A business headquartered elsewhere may still expose services from Mwanza through local ISP links, cloud-hosted applications, VPN gateways, web portals or partner systems. Attack-surface monitoring helps security teams see assets as an external observer would and reduces dependence on manually maintained inventories. This is especially useful when branches change providers, add public addresses, deploy temporary project systems or inherit infrastructure that was not recorded in a central configuration database.

Mwanza organisations should use FortiRecon findings to improve asset ownership. Every exposed service should have a named business and technical owner, an expected purpose, an approved security configuration and a lifecycle plan. If FortiRecon discovers an asset that no team recognises, the response should not be limited to closing a vulnerability; the organisation should determine why the asset exists and how it escaped normal governance. That turns digital risk protection into a control for operational discipline as well as threat detection. Adversary Centric Intelligence can add further context by showing relevant threat activity, leaked credentials or exploited vulnerabilities that may change remediation priority.

A Mwanza quotation request should state whether the site is included within a national or regional deployment, whether one FortiRecon tenant will cover several subsidiaries, and which assets belong to the local branch. Include the subscription period, required modules, monitored-asset estimate and any need for onboarding assistance or recurring reporting. If remediation may involve firewall policy, network segmentation or public-service changes, the FourTeck Tanzania services page describes the wider integrated infrastructure approach. The important point is to connect discovery to action: alerts should be routed to the people who can change DNS, cloud settings, firewall policies, credentials or application configuration without delay.

FortiRecon Digital Risk Protection Arusha

FortiRecon Digital Risk Protection Arusha can help hospitality groups, tour operators, NGOs, education institutions, professional services, healthcare organisations and regional businesses that depend heavily on public websites, online booking, email identities and cloud applications. These environments are attractive to attackers because digital trust matters: customers may respond quickly to a familiar brand, and employees may be more likely to open messages that appear to come from an executive or partner. Brand impersonation and credential exposure therefore deserve the same planning attention as vulnerabilities on internet-facing infrastructure.

For Arusha organisations with a recognised public brand, Brand Protection can be considered alongside External Attack Surface Management. EASM focuses on the systems and exposures attackers can reach, while Brand Protection monitors for misuse of the organisation’s public identity through typo-squatted domains, phishing pages, rogue applications or social-media impersonation. Those are different security problems and may involve different internal owners. The infrastructure team may remediate a vulnerable service, while the brand, legal or fraud team may need to validate and authorise action against impersonation. A deployment plan should define both workflows before alerts begin to arrive.

When seeking a FortiRecon quote for Arusha, describe your digital footprint in business terms: primary brands, public websites, customer portals, major cloud platforms, remote-access gateways, subsidiaries, executive profiles and critical suppliers. State whether monitoring should cover only the main organisation or also related entities. If the company operates sites in Kenya or Uganda, link the procurement conversation to the wider regional environment and keep asset ownership clearly separated by country. FourTeck’s Kenya resource and Uganda resource can support those parallel discussions without assuming that licensing, service terms or deployment responsibilities are identical in every market.

FortiRecon Digital Risk Protection Dodoma

FortiRecon Digital Risk Protection Dodoma is relevant to public-sector bodies, regulated organisations, contractors, NGOs, education institutions and businesses that need better evidence of what is exposed beyond their internal network. In governance-heavy environments, the value of attack-surface management is not only technical discovery. It can support a repeatable process for proving that public assets are inventoried, ownership is assigned, serious exposures are prioritised and remediation progress is documented. That visibility can strengthen internal audit conversations and reduce the risk of unmanaged internet-facing services remaining outside normal vulnerability programmes.

A Dodoma deployment should begin with policy. Define what counts as an authorised public asset, which business units are allowed to create internet-facing services and what remediation timeline applies when high-risk exposure is discovered. Map FortiRecon findings into the organisation’s existing incident, change and vulnerability-management processes. If the security team uses the MITRE ATT&CK framework, current FortiRecon documentation includes views that map discovered threats to relevant techniques and sub-techniques, which can help analysts communicate attacker behaviour in a familiar model. The platform should complement governance rather than create a second, disconnected risk register.

For a quotation, list the entities and assets in scope, required FortiRecon modules, approximate asset count, subscription term and reporting needs. If Brand Protection is required, identify who can authorise takedown action and who owns public communication. If ACI is required, define which analyst team will review ransomware intelligence, leaked credentials, exploited vulnerabilities and threat-actor reporting. Organisations with branches outside Dodoma should decide whether findings will be managed centrally or delegated to local teams. The FourTeck Tanzania contact page is the verified route to share that scope and request a commercial discussion.

FortiRecon Digital Risk Protection UAE

FortiRecon Digital Risk Protection UAE can support regional headquarters, financial services, retail groups, hospitality brands, professional firms, technology companies and multi-country organisations whose public digital footprint changes rapidly. UAE-based teams may manage domains, cloud services, customer platforms and subsidiaries across the Gulf, Africa and Asia. That scale can make static asset inventories obsolete quickly. FortiRecon Attack Surface Management provides an outside-in way to discover and continuously monitor exposure, helping security teams identify systems that may have been created outside central processes or inherited through acquisitions and expansion.

Brand Protection can be particularly relevant where an organisation has a high-value consumer or executive identity. Attackers frequently imitate trusted brands through lookalike domains, fake pages, social profiles or rogue applications. A UAE deployment should define exactly which brands, executive profiles and digital identities are most important, because monitoring everything without ownership can generate work without business prioritisation. Adversary Centric Intelligence can then add context about ransomware activity, leaked credentials, threat actors, exploited vulnerabilities and vendor risks that may affect the organisation’s sector or operating geographies.

For UAE procurement, compare FortiRecon offers by modules, monitored-asset quantity, subscription duration, optional entitlements and professional-service scope. Do not compare only a single licence price when the monitored footprint or modules differ. Multi-country security teams should also decide whether one central SOC will manage all alerts or whether regional owners will receive only findings that affect their assets. FourTeck’s Fortinet UAE resource and Firewall Dubai specialist site can support related Fortinet and network-security planning where external exposure findings lead to changes at the edge. Commercial availability and service details should be confirmed for the exact UAE requirement.

FortiRecon Digital Risk Protection Uganda

FortiRecon Digital Risk Protection Uganda can help organisations that operate a growing mix of public infrastructure, cloud applications, mobile services, customer portals and regional branches. Security teams often know their main production systems but have less visibility into old domains, forgotten test services, inherited public IP addresses or externally hosted applications created by separate business teams. Attack-surface management is designed to identify this broader footprint from the perspective of an adversary and help prioritise security issues that may otherwise remain outside internal scanning programmes.

For organisations with customer-facing services, Brand Protection adds monitoring for impersonation and phishing. This should be aligned with the company’s fraud, legal and communication processes because a fake website or social profile may need different handling from a vulnerable server. Adversary Centric Intelligence can also provide context about leaked credentials, ransomware intelligence, threat actors and vulnerabilities being exploited in the wild. The security team should decide how such intelligence changes action: for example, whether an exploited vulnerability receives accelerated patching, whether a leaked account is disabled immediately or whether a vendor exposure triggers a supplier-security review.

Uganda buyers should prepare a FortiRecon scope that lists monitored brands, domains, public infrastructure, subsidiaries and required modules. Include the expected asset quantity and subscription term, then identify the teams responsible for each alert category. Organisations operating across East Africa can coordinate policy centrally while keeping local asset ownership accurate. The FourTeck Uganda site can support related country-level technology discussions, while the Tanzania project can remain focused on its own commercial and operational scope. This separation is useful for procurement because it avoids assuming that the same quantity, tax treatment, deployment scope or support arrangement automatically applies across borders.

FortiRecon Digital Risk Protection Kampala

FortiRecon Digital Risk Protection Kampala is suited to organisations whose headquarters or major operational teams manage digital assets for multiple branches and business units. Central IT can easily lose visibility when project teams register new domains, cloud resources are created for short-term initiatives, or subsidiaries retain legacy systems after mergers and restructuring. FortiRecon EASM can provide continuous external discovery that helps compare the real internet-visible footprint with the organisation’s approved asset inventory. That difference often reveals governance gaps as well as technical risk.

Kampala security teams should build a triage model before onboarding. Findings that show direct exposure on critical systems need a different response from low-risk informational observations. Brand-abuse alerts may require legal verification, while leaked credentials should be checked against identity and access records. Threat intelligence should be correlated with the organisation’s technology stack so that analysts can distinguish general industry activity from evidence that changes local risk. If FortiRecon Security Orchestration is included in the chosen licensing and release, workflow automation can help reduce repetitive manual steps, but the organisation still needs clear approval boundaries for actions that affect production systems or public identities.

For a Kampala quotation, document the number of domains and public IP ranges, any subsidiary or vendor-monitoring requirement, preferred modules and term, and the target operating model after deployment. State whether the customer needs a self-managed platform, onboarding assistance, recurring reviews or integration support. If the same company also operates in Tanzania or Kenya, standardise the security taxonomy where practical: common severity definitions, remediation ownership, naming conventions and reporting templates make regional governance easier even when each country has different assets. This approach turns FortiRecon into a shared exposure-management process rather than a collection of disconnected country dashboards.

FortiRecon Digital Risk Protection Arua

FortiRecon Digital Risk Protection Arua can be relevant to NGOs, logistics operations, health programmes, education projects, branch offices and organisations that depend on centrally managed digital services while operating from distributed locations. A branch may not host large public infrastructure locally, but it still relies on email identities, remote access, cloud applications, partner portals and shared corporate domains. Digital risk protection therefore should not be judged only by the number of servers physically located in the city. The risk comes from the broader organisational footprint that attackers can discover and abuse.

For distributed environments, credential exposure can be especially important. Staff may work across locations, use multiple cloud platforms and access systems remotely. FortiRecon’s brand and adversary-intelligence capabilities can help identify leaked credentials and impersonation activity that should trigger investigation. The organisation should have a defined response for account reset, multi-factor authentication checks, suspicious login review and user communication. If a branch uses shared accounts or weak identity practices, the project should treat those as remediation priorities rather than relying on monitoring alone.

Arua procurement should normally be coordinated with the organisation’s central security owner so that licensing is not fragmented across small locations. The quotation should reflect the full set of assets that need monitoring and identify how local contacts will receive or escalate relevant findings. Where bandwidth or staffing is limited, teams should avoid creating an alert process that depends on constant manual portal review; email, ticketing or SIEM workflows may be more sustainable. The wider FourTeck Uganda site can support associated infrastructure discussions, while the FortiRecon commercial scope should remain tied to verified monitored assets and required modules rather than the physical size of the local office.

FortiRecon Digital Risk Protection Mbarara

FortiRecon Digital Risk Protection Mbarara can support organisations that operate branch infrastructure, healthcare systems, education services, retail operations, agricultural supply chains or regional businesses with public digital dependencies. Even a modest branch can be affected by a corporate-domain phishing campaign, leaked staff credentials or vulnerabilities in centrally hosted services. Digital risk is therefore shared across the organisation. FortiRecon can help central security teams detect external exposure and threat activity while still attributing findings to the business unit or technical owner that must respond.

Vendor and supply-chain visibility may also matter where the organisation relies on third parties for applications, hosting, payment, logistics or managed services. FortiRecon Adversary Centric Intelligence includes vendor-risk context, and current product positioning highlights supply-chain risk assessment as one of the use cases. This information should not automatically be treated as proof that a supplier is unsafe; instead, it can be used as a trigger for focused due diligence, contract review, compensating controls or direct discussion with the vendor. Good governance separates an external signal from a confirmed incident while still acting quickly when the evidence warrants it.

For Mbarara buyers, define whether the local site is part of a larger Uganda-wide or regional subscription. Centralised licensing is often easier to govern when the same security team owns corporate domains and public infrastructure. Include expected asset counts, brands, executive monitoring needs, required modules and integrations in the quotation request. If the branch handles sensitive customer or health information, also define escalation time for leaked credentials and exposed services. FortiRecon should support a repeatable security process in which discovery, validation, ownership, remediation and closure are measured, not simply provide another source of alerts for an already busy IT team.

FortiRecon Digital Risk Protection Gulu

FortiRecon Digital Risk Protection Gulu can be considered by distributed organisations that want consistent digital-risk visibility without deploying a large local security stack at every branch. Because the service is designed to monitor digital footprint and threat activity from a central platform, a corporate security team can maintain a common process while branch contacts focus on the systems and users they actually own. This can be useful for NGOs, education networks, healthcare providers, logistics firms and multi-site enterprises that need to manage risk across geographically separated operations.

The first step is to separate local infrastructure from corporate digital identity. A branch may have very few public IP addresses yet still be exposed through shared domains, remote-access gateways, cloud platforms, email accounts and brand impersonation. FortiRecon modules address those areas differently. EASM focuses on assets and vulnerabilities, Brand Protection focuses on identity abuse and digital-brand risk, and ACI adds contextual threat intelligence. A Gulu deployment does not need every module simply because they exist; the selected bundle should reflect the risks the organisation is prepared to manage and the workflows it can support.

When preparing a quote, describe the organisation-wide footprint and then identify which findings must be attributed to the Gulu operation. State whether local staff will investigate alerts or whether a central team will own all response. If phishing or leaked credentials are a concern, include the identity team in planning so reset and investigation procedures are defined. If exposed services are a concern, identify who controls DNS, cloud platforms and firewalls. This ownership map is often more important than the number of dashboards. FortiRecon can highlight risk, but the business value comes from turning that evidence into timely security changes and verified closure.

FortiRecon Digital Risk Protection Kenya

FortiRecon Digital Risk Protection Kenya can support enterprises, fintech companies, retailers, service providers, healthcare organisations, education groups and regional headquarters with complex public digital footprints. Organisations operating across East Africa often centralise applications in one country while serving users and customers in several others. That creates a blended exposure surface made up of corporate domains, cloud-hosted services, country-specific websites, APIs, remote-access infrastructure and third-party platforms. FortiRecon can help security teams discover and monitor that footprint from an attacker’s perspective and use common prioritisation across markets.

Kenya-based security teams should pay particular attention to ownership boundaries. A regional domain may be managed by headquarters, a country microsite by marketing, an API by a development team and a customer portal by an external provider. An exposure-management programme needs one record of who can remediate each asset. Brand Protection may also be important for digital businesses where phishing or fake applications can directly affect customers. Takedown capability should be governed with clear validation and authority so that the organisation can act quickly on genuine impersonation without confusing ordinary criticism or unrelated content with malicious brand abuse.

A Kenya quotation should specify the monitored organisation structure, relevant subsidiaries, asset estimates, chosen FortiRecon modules and subscription term. If the same project includes Tanzania or Uganda, procurement can standardise commercial comparisons around the same scope categories while allowing country-specific assets and implementation details. The FourTeck Kenya site provides a regional technology contact point, and FourTeck IT Solutions Africa provides broader multi-country context. Buyers should still confirm the exact FortiRecon entitlement and service scope for each commercial offer rather than assuming regional uniformity.

FortiRecon Digital Risk Protection Kuwait

FortiRecon Digital Risk Protection Kuwait is relevant to organisations that need continuous awareness of public digital exposure and external threat activity across corporate, financial, retail, energy, professional-service and government-related environments. As companies adopt cloud services and internet-facing applications, the boundary that security teams must monitor extends far beyond a single data centre. Attack-surface management can help identify assets that are unintentionally exposed, incorrectly configured or simply missing from internal inventories, providing a more accurate basis for remediation planning.

Kuwait-based buyers should decide whether the main priority is exposure discovery, brand protection or deeper adversary intelligence. An organisation with a small public footprint but a well-known customer brand may gain more value from combining EASM with Brand Protection than from purchasing monitoring capacity that exceeds its actual assets. A technology company or financial institution with large cloud and domain estates may need broader asset counts and more formal integration with SIEM, vulnerability management or incident response. If the organisation wants IASM, current Fortinet licensing guidance should be checked because prerequisites and entitlements can differ from the external bundles.

For a Kuwait quotation, provide the number of relevant domains, subdomains, public IPs, brands, subsidiaries, executive identities and vendors that may need monitoring. Define the reporting and operational model, including who handles takedowns and who owns vulnerability remediation. The FourTeck Kuwait site can support related technology discussions. For regional businesses with UAE, Tanzania or African operations, keep one governance framework but do not merge assets indiscriminately; licensing and reporting are easier to control when each entity is clearly tagged and ownership is understood before the service goes live.

FortiRecon Digital Risk Protection Ghana

FortiRecon Digital Risk Protection Ghana can support banks, financial technology companies, retailers, telecom-related businesses, energy firms, education providers, public-sector organisations and growing enterprises that need better visibility into external digital risk. As organisations add cloud workloads, mobile applications, remote-access systems and web services, it becomes difficult for security teams to maintain a complete inventory using spreadsheets or periodic scans. FortiRecon EASM is designed for continuous discovery and monitoring, allowing teams to see internet-facing assets and exposures from an outside perspective.

Brand risk should also be considered where customers interact online. Fake domains, phishing pages, social impersonation and rogue applications can capture credentials or payment information even when the organisation’s own systems remain secure. FortiRecon Brand Protection addresses this external problem and supports action against qualifying impersonation. A Ghana deployment should define who validates findings, who owns customer communication and who can approve takedown requests. This avoids delays when a time-sensitive phishing incident appears and prevents the security team from waiting for ad hoc executive approval in the middle of an event.

For commercial planning, document monitored assets, required modules, subscription length and integration needs. Organisations with multiple subsidiaries should decide whether each subsidiary needs separate reporting, separate user access or a centralised management view. ACI can add intelligence about leaked credentials, ransomware, exploited vulnerabilities and relevant threat actors, but the organisation should define how those insights change decisions. The FourTeck Ghana site provides a regional technology resource for related infrastructure conversations. If the Ghana operation is part of a wider Africa programme, the FortiRecon design can use consistent policies while keeping asset ownership and local response responsibilities explicit.

FortiRecon Digital Risk Protection Nigeria

FortiRecon Digital Risk Protection Nigeria can be valuable for organisations with large digital ecosystems, including banks, fintech companies, ecommerce platforms, telecom-related businesses, insurers, professional firms, energy organisations and multi-brand enterprises. The larger the digital footprint, the greater the chance that asset inventories drift from reality. New subdomains are created, cloud workloads change, public APIs are exposed and third-party services are added. Attackers continuously search that public surface, so security teams benefit from continuous discovery that is independent of internal records.

Nigeria-based consumer brands may also face phishing, social impersonation, fake apps and fraudulent domains that exploit customer trust. FortiRecon Brand Protection can monitor for those patterns and support takedown workflows for valid impersonation. Security leaders should connect this capability with fraud teams and customer-support channels, because external abuse may first be reported by users rather than detected through network telemetry. ACI can add threat context from dark-web and open-source sources, including leaked credentials and ransomware-related intelligence, helping analysts decide which signals are most relevant to the organisation’s sector and assets.

A Nigeria quotation should clearly state the asset scale, number of brands, subsidiaries, executive-monitoring requirements and chosen modules. Large organisations should also ask how access will be delegated between central and business-unit teams and how alerts will enter existing ticketing or SOC processes. The FourTeck Nigeria site is a relevant regional resource for broader technology requirements. Where the same organisation has operations in Tanzania, Ghana or Kenya, a single exposure-management policy can improve governance, but licensing quantities and operational responsibilities should remain grounded in the actual digital footprint of each entity rather than a broad regional estimate.

FortiRecon Digital Risk Protection Seychelles

FortiRecon Digital Risk Protection Seychelles can support hospitality groups, financial services, offshore business services, travel operators, government-related organisations and companies whose reputation depends heavily on trustworthy online interaction. A geographically small market can still have global digital exposure because customers, partners and attackers reach services through the internet. Public websites, booking engines, cloud applications, email domains, remote-access gateways and social identities may be accessed from anywhere, making digital risk protection a matter of internet visibility rather than physical location.

For hospitality and travel brands, impersonation can be particularly disruptive. A fake booking page, cloned social account or lookalike domain can damage customer trust and create fraud without compromising the genuine website. Brand Protection should therefore be planned with marketing and customer-service teams as well as IT security. External Attack Surface Management can separately monitor internet-facing infrastructure for exposures. If ACI is included, analysts can review threat intelligence that is specific to the organisation and use it to prioritise actions rather than treating every global cyber event as equally relevant.

Seychelles buyers should define the digital footprint carefully before requesting licensing because a business may have more domains and cloud services than local infrastructure suggests. Include parent and subsidiary brands, externally hosted systems, public IP ranges and any critical executive identities. Decide who is responsible for validation and remediation when the service finds an issue, especially where IT is outsourced or split between local and international providers. If the organisation is part of an Africa-wide group, FourTeck IT Solutions Africa provides broader regional context, but each FortiRecon deployment should still be scoped around verified assets, the required modules and a clear operating model for handling findings.