Because CBEST testing occurs on live production systems, a documented, rehearsed escalation and stop- testing procedure - sometimes called a "kill switch" or emergency contact protocol - is a fundamental risk control, ensuring the Control Group (or a designated risk owner) can immediately halt activity if genuine business disruption risk emerges. Removing monitoring (A) would be reckless and contrary to good practice, unilateral Red Team decision-making with no communication channel (B) removes essential oversight, and relying on verbal-only authorisation (C) is legally and operationally unsound - written, signed authorisation is a baseline requirement.