Approach
How an engagement runs
Understand, assess, prioritize, improve, validate, advise. Every engagement follows the same order, so you always know where you are and what comes next. The consultant who scopes the work does it, from first call to the end.
Six steps, used as the work requires
Not every engagement uses every step. A Health Check covers understanding, assessing and prioritizing. Remediation Guidance & Retesting covers improving and validating. Advisory work is the last step, and many clients stop before it.
Understand
We learn how the business runs, what systems and data it depends on, who does what, and what prompted the question. Nothing is touched yet. For most clients this starts with the free consultation.
Used in: Every engagement
Assess
We test and review against a recognized framework: configuration, access, backups, exposure and architecture, depending on the service.
Used in: Health Check and the other assessments, penetration testing
Prioritize
Findings are ranked by business risk, not by scanner score, with quick wins separated from longer-term improvements.
Used in: Every assessment report
Improve
We recommend fixes your IT provider or team can actually carry out, in the order that reduces the most risk, and guide them through the changes: policy, configuration or architecture.
Used in: Remediation Guidance & Retesting, Security Architecture
Validate
We check that the changes work, which can mean reviewing the new configuration or retesting the original findings.
Used in: Remediation Guidance & Retesting, penetration retests
Advise
If you want ongoing help, we stay on as a vCISO, Virtual Security Architect or Security on Call. Many clients stop before this step.
Used in: vCISO, Virtual Security Architect, Security on Call, GRC and AI governance
Talk to a senior security consultant
Start with a free 45-minute consultation. Bring the concern, the audit finding or the insurance question. You leave with a recommended next step, whether or not you hire us.
Book a Security Consultation