Knowledge BaseRisk MapOperating Model TemplatesServices AboutStart an Engagement
Advisory Services

Program Work, Not Slide Decks

Operating models that work, programs that perform under pressure, and governance that matches how decisions actually get made.

📍

Location & Site Risk Assessment

Your estate on the Risk Intelligence Map, scored and read for you. Every site, vendor hosting region, and recovery target on one live map, with the concentrations and separation gaps written up for the people who act on them.

  • Whole-estate scoring on your existing 5×5 register scale
  • Separation distance between every primary and its recovery target
  • Vendor and cloud region concentration analysis
  • Delivered on a platform that meets your security and privacy requirements
What's included →
⚙️

GRC Operating Model Design

For organizations whose governance programs are technically sound but organizationally broken: unclear ownership, findings that age instead of closing, and committees that review but never decide.

  • Current state operating model assessment
  • Ownership and RACI design
  • Workflow and escalation path mapping
  • Risk taxonomy, scoring, and appetite framework design
What's included →
🛡️

Operational Resilience Program Build

What your critical services depend on, what recovery each one needs, and whether your vendor contracts can deliver it. Continuity, crisis, and testing follow from that spine.

  • BIA and critical service identification
  • Recovery strategy and RTO/RPO design
  • Testing program design and execution
What's included →
Monthly Retainer
🤝

Fractional Advisory Retainer

Ongoing embedded support, for organizations that need senior GRC leadership without a full-time hire, or senior backup when the exam notice, the audit letter, or the incident arrives.

  • Dedicated hours per month (flexible scope)
  • Strategy, review, and decision support
  • Audit, exam, and board prep support
From $7,500 per month
What's included →

The retainer starts at $7,500 per month. Project engagements are scoped and priced to fit. Tell us what you're working on.

Start a Conversation

Not ready to engage yet? Start with the knowledge base.

Practitioner articles on operating models, resilience, ERM, and AI in GRC, free, no signup required.

Read the Knowledge Base