The process
A simple method that clients can follow even without me: clarity, priority, execution, and measurable outcomes.
1) Intake
10–15 minute form review + quick clarifying call if needed. We confirm scope and the fastest outcome.
2) Assessment
Identify risks, constraints, and existing controls. Security posture, systems dependencies, vendor weaknesses.
3) Plan
Produce a tiered plan: “Now / Next / Later”, budget tiers, procurement list, SOPs, and checklists.
4) Implementation
Either DIY with guidance, or outsourced execution with oversight: accountability, QA, and proof of completion.
5) Operate
Training, drills, and maintenance routines so the system stays resilient after the project ends.
6) Review
Quarterly or incident‑based review: adjust SOPs, update vendors, patch weaknesses, improve response.
Consulting vs implementation
Consulting is the plan, the logic, the options, and the decision support. Implementation is the physical execution. I can do either (or manage outsourced contractors) depending on scope, timing, and funding.
Request an intake