Complete service catalogue

Every service has a defined depth, deliverable and boundary.

The service architecture follows the Risk Assessment & Response Framework: assessment identifies signals; investigation establishes and diagnoses Findings; response specification defines what must be achieved; remediation executes; verification tests the original Finding.

Assessment

Free Assessment

A low-friction entry assessment that identifies signals, obvious concerns and areas that may warrant deeper investigation.

Included

  • Initial case / system intake
  • Definition of the immediate assessment question
  • Review of basic information supplied by the client
  • High-level scan for obvious risk signals and gaps
  • Initial identification of areas requiring attention
  • Preliminary prioritization of those areas
  • Concise assessment outcome
  • Clear indication of whether deeper investigation may be warranted

Boundary: Does not establish full Findings, diagnose problems, specify solutions, or perform remediation.

Assessment / Preliminary Investigation

Peripheral Assessment

A broader preliminary assessment for clients who need more than a basic scan but are not yet commissioning a full investigation.

Included

  • Everything required to establish the agreed preliminary scope
  • Broader review of supplied case / system evidence
  • Review of relevant documents, records or technical information
  • Cross-checking of material indicators
  • Identification of candidate problem areas
  • Preliminary grouping and prioritization of candidate issues
  • Identification of information/evidence gaps affecting confidence
  • Preliminary risk picture
  • Recommended areas for full investigation

Boundary: Does not establish final Findings, provide solution instructions, or execute corrective work.

Investigation → Diagnosis

Thorough Assessment / Investigation

The principal investigative service. It establishes material Findings from evidence and explains what is wrong and why it matters.

Included

  • Everything needed to establish the agreed investigation scope
  • Evidence intake and evidence-register maintenance
  • Evidence quality / relevance review
  • Indicator identification and traceability
  • Investigation of material candidate issues
  • Establishment of atomic Findings
  • Finding statements written solution-neutrally
  • Evidence references supporting each Finding
  • Materiality / significance characterization
  • Severity / priority assessment where applicable
  • Finding-level analysis
  • Diagnosis of contributing factors and conditions
  • Cross-Finding relationship analysis
  • Identification of contradictions, dependencies and unresolved matters
  • Overall diagnostic position
  • Investigation / assessment report
  • Finding register / evidence traceability
  • Conclusion describing what has been established

Boundary: No mitigation, corrective instructions, document lists, implementation steps, or remediation execution.

Response Specification

Mitigation Checklist

A concise response specification translating established Findings into the minimum set of response requirements/tasks.

Included

  • Review of established Findings
  • Finding-to-required-outcome mapping
  • Definition of the required outcome for each covered Finding
  • Concise response/remediation task list
  • Evidence-of-completion requirement for each task
  • Dependencies / prerequisites
  • Responsible-party field where applicable
  • Status / tracking fields
  • Priority ordering
  • Concise implementation boundary statement

Boundary: Specification only. It does not contain detailed implementation design or perform the work.

Response Specification

Summarized Solution Report

A high-level specification of what must be achieved to address established Findings.

Included

  • Everything needed to establish the response-specification scope
  • Summary of established Findings
  • Response priorities
  • Finding-to-required-outcome matrix
  • High-level response specification for each Finding
  • Dependencies between Findings / responses
  • Evidence requirements
  • Verification criteria
  • High-level sequencing / implementation priorities
  • Overall response position
  • Explicit execution boundary

Boundary: Does not provide detailed implementation execution or perform remediation.

Response Specification

Detailed Solution / Remediation Specification

A detailed specification defining the target state, requirements, dependencies, evidence and acceptance conditions for remediation.

Included

  • Complete upstream investigation / Findings required for the specification
  • Detailed Finding register
  • Remediation objective for each Finding
  • Precisely defined required end state
  • Detailed remediation requirements
  • Dependencies and preconditions
  • Sequencing requirements
  • Evidence requirements
  • Acceptance criteria
  • Verification method for the original Findings
  • Residual-risk considerations
  • Implementation notes where explicitly within scope
  • Exclusions and scope boundaries
  • Detailed response/remediation specification

Boundary: Specification, not execution. Actual corrective work is separately commissioned.

Remediation / Execution

Complete Service / Remediation

Execution of an approved response specification to perform the actual corrective work.

Included

  • Review and confirmation of the approved specification
  • Implementation planning within the agreed execution scope
  • Execution of approved corrective activities
  • Configuration / process / documentation changes as applicable
  • Execution evidence capture
  • Change records
  • Issue escalation where scope or assumptions change
  • Completion status tracking
  • Remediation completion record
  • Preparation for verification

Boundary: Actual implementation is separate from diagnosis and requires an applicable specification and agreed execution scope.

Verification

Verification

Tests whether remediation actually addressed the original Findings and records residual risk.

Included

  • Review of the original Finding and acceptance criteria
  • Review of remediation evidence
  • Verification test planning
  • Execution of agreed verification checks
  • Comparison of results against acceptance criteria
  • Finding status determination
  • Residual-risk identification
  • Verification evidence record
  • Verification report / outcome
  • Identification of genuinely new Findings where applicable

Boundary: Verification tests the original Finding. Newly discovered problems are treated as new Findings rather than silently absorbed.

Need help choosing?

Start at the depth that matches the question you need answered.

You do not need to buy execution to obtain an investigation, and you do not need to buy a detailed specification when a concise response checklist is sufficient.

Discuss your case