Service overview
What this service is designed to establish
Identifies assets, threats, vulnerabilities, existing controls and residual exposure across people, places, information or operations.
The first task is to convert a broad concern into specific questions that can be investigated responsibly. The method, duration and deliverables then follow from those questions—not from assumptions about what the answer should be.
Questions the engagement may address
What assets and objectives matter most?
Which threats are credible in the operating context?
Where are control gaps or single points of failure?
Which actions reduce the most risk first?
