Frequently Asked Questions
Understand evidence requirements, delivery responsibilities and how an engagement is scoped.
Clear expectations before work begins.
Can assessment be a standalone engagement?
Yes. Assessment can be scoped independently. Your team can use the agreed deliverables to plan its next steps and choose how to implement them.
Must every engagement start with an assessment?
A discovery discussion establishes the starting point. If reliable findings and a defined requirement already exist, a focused implementation or advisory scope may be appropriate.
Does Shield actively scan our production systems?
Shield uses supported evidence submissions and configured analysis with human review. Any live discovery, scanning or connector activity requires a separately confirmed capability, authorisation and scope.
How long will the work take?
Milestones are agreed after scope, usable evidence, dependencies and team availability are confirmed. A focused Shield assessment may target five business days from complete usable evidence, subject to agreed scope and assessor availability.
How are solutions selected?
Selection follows requirements, interoperability, operational ownership and support needs. Relevant technology choices are discussed during scoping or remediation design.
Can existing systems remain in place?
Yes, where suitable. We assess whether to improve, integrate, supplement or replace existing systems. Compatibility and migration dependencies must be checked before committing to the design.
Can remediation be delivered in phases?
Yes. Priorities, dependencies and acceptance criteria guide a phased plan. Each phase has agreed responsibilities, change controls and handover outputs.
What does our team need to provide?
Authorised evidence, relevant owners, timely decisions and access agreed for the engagement. Production changes and approvals remain controlled through the agreed process.
What is included in training and support?
Training, documentation, handover and support coverage are defined in the engagement. Confirm audiences, sessions, support hours and response expectations before delivery.
How do quarterly reviews differ from monitoring?
Quarterly reviews are periodic evidence-based checkpoints. They are distinct from continuous monitoring, a security operations service or round-the-clock incident response.
How is confidential information handled?
Agree the applicable confidentiality and processing terms, authorised access, transfer method, retention and deletion arrangements before sharing evidence. The public enquiry form is for a high-level business discussion.
What does the readiness report establish?
It records observations within the agreed scope, evidence and assessment date. Regulatory determinations and independent certification decisions remain with the relevant authorities and appointed bodies.
Can you guarantee uninterrupted migration or a specific improvement?
Delivery plans can include backups, staged changes, validation and rollback preparation. Results depend on the environment and agreed scope; guarantees require explicit contractual terms.
Will you publish our name or assessment results?
Customer references and case studies require appropriate approval. Public illustrative scenarios are labelled separately from actual customer results.
Can we start with one scope and expand later?
Yes. Scope can expand through an agreed change or later engagement. Dependencies and compatibility are reviewed; expansion may require additional work.
What happens after an enquiry?
Our team reviews the requirement and coordinates a discovery discussion. If there is a suitable fit, a written scope and proposal follow. Scheduling and delivery milestones are confirmed directly.
Define the right next step.
Share your business challenge, environment and intended outcome. We will discuss a relevant scope and the responsibilities needed to deliver it.
Book a Discovery Call →