Resources
Checklists and self-assessments taken from how we actually run engagements. Each is complete on the page — no form, no email address, no download wall. If they are useful on their own, use them on their own.
Why these are not gated
A checklist behind a form is a lead-capture mechanism wearing a checklist's clothes. These are the actual working documents, and they are more useful to us as evidence of how we think than as a source of contact details.
Every item, every clause reference, every caveat. Nothing is held back for a follow-up conversation.
Each one states where judgement is required and where a checklist cannot substitute for assessment — including the platform evaluation guide, where we are not a neutral party.
Regulatory and standards statements carry the clause they derive from and the date they were verified, so you can check them.
Written to be run again. A readiness checklist used once before an audit is worth far less than one run every cycle.

After the checklist
Send us what the assessment surfaced. You will get a view on which items are genuine blockers, which are lower priority than they look, and what closing them realistically takes.
No obligation, and no follow-up sequence. One reply from a consultant.