DOC 01
Current-to-target profile
Where you are, where the business needs you to be, and the gap in between.
Level 01 · Project
Cyber Risk Clarity Sprint
A focused assessment that turns objectives, material risks, and control gaps into an executive-ready 90-day plan. Fixed scope, defined end date — built for a team that can execute once the direction is clear.
Fixed scope
About two weeks on average
Defined end date
You walk away with
DOC 02
Business risk register
Each risk tied to exposure, urgency, a named owner, and a decision path.
DOC 03
Executive security brief
Options and tradeoffs a board can read in ten minutes and act on.
DOC 04
Prioritized 90-day roadmap
Sequenced against real capacity, with accountable next steps.
How it runs
DAYS 1–3
Discover
Interviews with leadership and the people who run the systems. Your business, your obligations, and what a good outcome looks like.
DAYS 4–8
Assess
Controls, gaps, and exposure — measured against the decisions you actually face, not a generic checklist. Evidence-based: interviews, documentation, and read-only review of the systems you choose to show. No testing, no scanning, no production access unless we scope tooling in together.
DAYS 9–10
Prioritize & brief
The four documents land, with a live executive readout — including the things we are deliberately not doing, named out loud.
A sprint can end here, or continue into a Level 02 cadence — by agreement, never by default.
Who owns what
Is a sprint the right size?
The 2-minute fit check will tell you — including when a bigger or smaller engagement fits better.