Discover and scope
We confirm business context, operating constraints, critical assets, stakeholders, existing tooling, known pain points and required assurance outcomes.
- Stakeholder interviews
- Environment and artefact review
- Control and risk context
- Immediate risk triage
