Five stages
From understanding to validated results
Every engagement is scoped to your situation, but the shape is the same: agreed scope, evidence, clear recommendations, named ownership and visible progress.
01UnderstandUnderstand objectives, environment and challenges
We start by listening: what the organisation is trying to achieve, how it operates and where the pressure is.
What you contribute
- Business objectives, key services and constraints
- Access to stakeholders and existing documents
- Agreement on scope, timing and a named sponsor
What you receive
- A written understanding of context and scope
- An agreed plan and progress reporting rhythm
02AssessAssess risks, requirements and existing capabilities
We examine risks, applicable requirements and what already works, using evidence rather than opinion.
What you contribute
- Evidence such as policies, configurations and records
- Time with control and system owners
- Timely answers to evidence requests
What you receive
- Assessment findings tied to evidence
- A view of requirements that apply and current gaps
03PrioritisePrioritise actions by risk and business need
Not everything can be fixed at once, so we rank actions by risk, effort and dependency.
What you contribute
- Decisions on risk appetite and acceptable trade-offs
- Input on budget and capacity
- Owners for each action
What you receive
- A prioritised action plan with owners
- Clear recommendations written for decision makers
04ImplementSupport implementation and integration
We support the work of putting actions in place, from controls and processes to automation and technical fixes.
What you contribute
- Staff time to make changes
- Decisions on change windows and approvals
- Feedback on what is working
What you receive
- Hands-on support or guidance, as scoped
- Progress reports against the plan
05ValidateValidate outcomes and identify improvements
We check that changes work, record the result and point to what should improve next.
What you contribute
- Access to confirm changes
- Agreement on evidence of completion
- Ownership of ongoing routines
What you receive
- Validation of outcomes against what was agreed
- A summary of remaining risk and next improvements