Home/About/Our approach

Our approach

A clear engagement process, from understanding your objectives to validating the result, with agreed scope, evidence and ownership at every stage.

Five stages

From understanding to validated results

Every engagement is scoped to your situation, but the shape is the same: agreed scope, evidence, clear recommendations, named ownership and visible progress.

01Understand

Understand objectives, environment and challenges

We start by listening: what the organisation is trying to achieve, how it operates and where the pressure is.

What you contribute

  • Business objectives, key services and constraints
  • Access to stakeholders and existing documents
  • Agreement on scope, timing and a named sponsor

What you receive

  • A written understanding of context and scope
  • An agreed plan and progress reporting rhythm
02Assess

Assess risks, requirements and existing capabilities

We examine risks, applicable requirements and what already works, using evidence rather than opinion.

What you contribute

  • Evidence such as policies, configurations and records
  • Time with control and system owners
  • Timely answers to evidence requests

What you receive

  • Assessment findings tied to evidence
  • A view of requirements that apply and current gaps
03Prioritise

Prioritise actions by risk and business need

Not everything can be fixed at once, so we rank actions by risk, effort and dependency.

What you contribute

  • Decisions on risk appetite and acceptable trade-offs
  • Input on budget and capacity
  • Owners for each action

What you receive

  • A prioritised action plan with owners
  • Clear recommendations written for decision makers
04Implement

Support implementation and integration

We support the work of putting actions in place, from controls and processes to automation and technical fixes.

What you contribute

  • Staff time to make changes
  • Decisions on change windows and approvals
  • Feedback on what is working

What you receive

  • Hands-on support or guidance, as scoped
  • Progress reports against the plan
05Validate

Validate outcomes and identify improvements

We check that changes work, record the result and point to what should improve next.

What you contribute

  • Access to confirm changes
  • Agreement on evidence of completion
  • Ownership of ongoing routines

What you receive

  • Validation of outcomes against what was agreed
  • A summary of remaining risk and next improvements
Working principles

How we keep engagements clear

01

Agreed scope

What is in and out of scope is written down and revisited when it changes.

02

Evidence first

Findings rest on records, configurations and observations that you can check.

03

Named ownership

Every recommendation has an owner on your side, so actions do not stall.

Progress reporting

You always know where things stand

Progress is reported against the plan agreed at the start, with status, open risks and decisions needed. Format and frequency are set with you at the start of each engagement.

Explore our services

Get in touch

Ready to plan the first stage?