Immediate action
Escalate confirmed exposure requiring an urgent owner decision.
Identify security gaps, decide which risks need action, and implement the controls included in your scope. ACW connects assessment findings with the people, systems, and operational dependencies involved in remediation.
Discuss your security prioritiesEscalate confirmed exposure requiring an urgent owner decision.
Assign fixes with affected systems, dependencies, and a way to verify them.
Plan changes needing architecture, budget, or operating-process decisions.
Identify who reviews access, monitors relevant signals, and responds to exceptions.
A documented scope, evidence-backed findings, and an action plan. Implementation engagements add records of the changes made and their verification. The handover identifies remaining risks, exceptions, and ongoing responsibilities.
Identify the services and information the organisation depends on.
Start with the question: priorities, a control baseline, an exploitable weakness, or response readiness. The initial scope can focus on one system.
No. Findings reflect the systems, access, methods, and period reviewed. Keep limitations and untested areas visible.
Assessment, implementation, and retesting are separate responsibilities. Agree which are included and who handles the remaining work.
Tell us what needs protection, which concern prompted the review, and the operational constraints on the work.