Assessment
Free Assessment
A low-friction entry assessment that identifies signals,
obvious concerns and areas that may warrant deeper
investigation.
Included
- Initial case / system intake
- Definition of the immediate assessment question
- Review of basic information supplied by the client
- High-level scan for obvious risk signals and gaps
-
Initial identification of areas requiring attention
- Preliminary prioritization of those areas
- Concise assessment outcome
-
Clear indication of whether deeper investigation may be
warranted
Boundary: Does not establish full
Findings, diagnose problems, specify solutions, or perform
remediation.
Assessment / Preliminary Investigation
Peripheral Assessment
A broader preliminary assessment for clients who need more
than a basic scan but are not yet commissioning a full
investigation.
Included
-
Everything required to establish the agreed preliminary
scope
- Broader review of supplied case / system evidence
-
Review of relevant documents, records or technical
information
- Cross-checking of material indicators
- Identification of candidate problem areas
-
Preliminary grouping and prioritization of candidate
issues
-
Identification of information/evidence gaps affecting
confidence
- Preliminary risk picture
- Recommended areas for full investigation
Boundary: Does not establish final
Findings, provide solution instructions, or execute
corrective work.
Investigation → Diagnosis
Thorough Assessment / Investigation
The principal investigative service. It establishes
material Findings from evidence and explains what is wrong
and why it matters.
Included
-
Everything needed to establish the agreed investigation
scope
- Evidence intake and evidence-register maintenance
- Evidence quality / relevance review
- Indicator identification and traceability
- Investigation of material candidate issues
- Establishment of atomic Findings
- Finding statements written solution-neutrally
- Evidence references supporting each Finding
- Materiality / significance characterization
- Severity / priority assessment where applicable
- Finding-level analysis
- Diagnosis of contributing factors and conditions
- Cross-Finding relationship analysis
-
Identification of contradictions, dependencies and
unresolved matters
- Overall diagnostic position
- Investigation / assessment report
- Finding register / evidence traceability
- Conclusion describing what has been established
Boundary: No mitigation, corrective
instructions, document lists, implementation steps, or
remediation execution.
Response Specification
Mitigation Checklist
A concise response specification translating established
Findings into the minimum set of response
requirements/tasks.
Included
- Review of established Findings
- Finding-to-required-outcome mapping
-
Definition of the required outcome for each covered
Finding
- Concise response/remediation task list
- Evidence-of-completion requirement for each task
- Dependencies / prerequisites
- Responsible-party field where applicable
- Status / tracking fields
- Priority ordering
- Concise implementation boundary statement
Boundary: Specification only. It does not
contain detailed implementation design or perform the work.
Response Specification
Summarized Solution Report
A high-level specification of what must be achieved to
address established Findings.
Included
-
Everything needed to establish the
response-specification scope
- Summary of established Findings
- Response priorities
- Finding-to-required-outcome matrix
- High-level response specification for each Finding
- Dependencies between Findings / responses
- Evidence requirements
- Verification criteria
- High-level sequencing / implementation priorities
- Overall response position
- Explicit execution boundary
Boundary: Does not provide detailed
implementation execution or perform remediation.
Response Specification
Detailed Solution / Remediation Specification
A detailed specification defining the target state,
requirements, dependencies, evidence and acceptance
conditions for remediation.
Included
-
Complete upstream investigation / Findings required for
the specification
- Detailed Finding register
- Remediation objective for each Finding
- Precisely defined required end state
- Detailed remediation requirements
- Dependencies and preconditions
- Sequencing requirements
- Evidence requirements
- Acceptance criteria
- Verification method for the original Findings
- Residual-risk considerations
- Implementation notes where explicitly within scope
- Exclusions and scope boundaries
- Detailed response/remediation specification
Boundary: Specification, not execution.
Actual corrective work is separately commissioned.
Remediation / Execution
Complete Service / Remediation
Execution of an approved response specification to perform
the actual corrective work.
Included
-
Review and confirmation of the approved specification
-
Implementation planning within the agreed execution
scope
- Execution of approved corrective activities
-
Configuration / process / documentation changes as
applicable
- Execution evidence capture
- Change records
- Issue escalation where scope or assumptions change
- Completion status tracking
- Remediation completion record
- Preparation for verification
Boundary: Actual implementation is
separate from diagnosis and requires an applicable
specification and agreed execution scope.
Verification
Verification
Tests whether remediation actually addressed the original
Findings and records residual risk.
Included
-
Review of the original Finding and acceptance criteria
- Review of remediation evidence
- Verification test planning
- Execution of agreed verification checks
- Comparison of results against acceptance criteria
- Finding status determination
- Residual-risk identification
- Verification evidence record
- Verification report / outcome
-
Identification of genuinely new Findings where
applicable
Boundary: Verification tests the original
Finding. Newly discovered problems are treated as new
Findings rather than silently absorbed.