The trigger
A customer questionnaire, an audit date, a board question, an incident, a funding round.
One email starts it. Tell us what you need to prove and who needs convincing, and we will come back with a scoped approach.
Not sure which applies? Email the general address and describe the situation — we will point you at the right one, including if that is none of them.
A customer questionnaire, an audit date, a board question, an incident, a funding round.
Who has to be satisfied: an auditor, a regulator, a client's security team, your own board.
Roughly what is in scope — cloud, applications, offices, headcount, existing certifications.
When the evidence is needed. It changes sequencing more than anything else.