Cyber Threat & Digital Risk Intelligence / Preparation
Evidence-based decision support
Prepare a research-ready matter
Ten inputs help us identify the smallest defensible initial engagement.
Ten things to include in the written instruction
- Identify the decision maker and decision deadline
- Name the legal person, asset, product, facility or proceeding
- State the jurisdiction and time period
- Supply at most five verbatim claims to test
- Say which result would change the decision
- Provide links to publicly accessible original records
- Label private materials and your right to share them
- Identify likely adverse or contradictory records
- State any litigation, conflicts, licensing or confidentiality constraint
- Confirm contact by email and approval route for written fixed-fee mandate
The first checks for this sector
- regulator breach notice
- issuer 8-K
- vendor incident statement
- unproven attribution
- stale CVE status
- vendor assurance without evidence
