The commercial model is progressive: free assessment → paid preliminary assessment → thorough investigation → response specification → remediation → verification.
| Service | Commercial status | What it buys | Included services / activities / tasks |
|---|---|---|---|
|
Free Assessment Assessment |
Free | A low-friction entry assessment that identifies signals, obvious concerns and areas that may warrant deeper investigation. |
|
|
Peripheral Assessment Assessment / Preliminary Investigation |
Quote | A broader preliminary assessment for clients who need more than a basic scan but are not yet commissioning a full investigation. |
|
|
Thorough Assessment / Investigation Investigation → Diagnosis |
Quote | The principal investigative service. It establishes material Findings from evidence and explains what is wrong and why it matters. |
|
|
Mitigation Checklist Response Specification |
Quote | A concise response specification translating established Findings into the minimum set of response requirements/tasks. |
|
|
Summarized Solution Report Response Specification |
Quote | A high-level specification of what must be achieved to address established Findings. |
|
|
Detailed Solution / Remediation
Specification Response Specification |
Quote | A detailed specification defining the target state, requirements, dependencies, evidence and acceptance conditions for remediation. |
|
|
Complete Service / Remediation Remediation / Execution |
Custom | Execution of an approved response specification to perform the actual corrective work. |
|
|
Verification Verification |
Custom | Tests whether remediation actually addressed the original Findings and records residual risk. |
|
Investigation establishes and explains what is wrong. It does not contain mitigation instructions.
Anyone asking for a solution enters the investigation pathway. The specification defines what must be achieved; execution remains separate.
Actual corrective work is a separately commissioned execution service based on an applicable specification.
Verification tests the original Finding against defined acceptance criteria and records residual risk.