A security consultant is beginning an authorized engagement against a client network. Before launching any exploitation, the consultant systematically gathers publicly available information about the target and its infrastructure. Which phase of the ethical hacking cycle is the consultant performing?