DOC 01
Current-to-target profile
Where you are, where the business needs you to be, and the gap in between.
Level 01 · Project
Cyber Risk Clarity Sprint
A focused assessment that turns objectives, material risks, and control gaps into an executive-ready 90-day plan. It has a fixed scope and a defined end date, and it's built for a team that can execute once the direction is clear.
Fixed scope
About two weeks on average
Defined end date
You walk away with
DOC 02
Business risk register
Each risk tied to exposure, urgency, a named owner, and a decision path.
DOC 03
Executive security brief
Options and tradeoffs a board can read in ten minutes and act on.
DOC 04
Prioritized 90-day roadmap
Sequenced against real capacity, with accountable next steps.
How it runs
DAYS 1 TO 3
Discover
Interviews with leadership and the people who run the systems. Your business, your obligations, and what a good outcome looks like.
DAYS 4 TO 8
Assess
Controls, gaps, and exposure, measured against the decisions you actually face. The evidence comes from interviews, documentation, and a read-only review of the systems you choose to show. There's no testing, scanning, or production access unless we scope tooling in together.
DAYS 9 TO 10
Prioritize and brief
The four documents land with a live executive readout, which also names what we're deliberately not doing.
A sprint can end here or continue into a Level 02 cadence, but only if we both agree to it.
Who owns what
Is a sprint the right size?
The 2-minute fit check will tell you, and it'll say so when a bigger or smaller engagement fits better.