How it works
What happens between sign-offs.
Here are the two services, what happens in each one, who is involved, and what you get.
A free hour on whatever's blocking you, and my written read on it within one business day.
The Stay Unblocked track
Stay Unblocked is what happens between sign-offs, so the next one is a smaller blocker. It has two services, and I've opened them up the same way as the stages of the Get Unblocked track.
Register Upkeep
Ongoing, on your own review calendar, with priority on mine between reviews.
| Step | How it works | Who's involved | What you get |
|---|---|---|---|
| The register document | If you've gone through the Get Unblocked track, your Security Sign-off Plan includes a register: each finding and the decision made about it. I keep it current, so the next sign-off starts from a known position rather than a fresh triage. You tell me the review dates already on your calendar. | You and me | A register that stays current |
| The Register Refresh document | Before each review on your calendar, I re-triage what's new since the last one, refresh the precedents your approver has set, and confirm the evidence behind each decision is still current. | Me, with your engineers when I need them | The refreshed register |
A Shift-Left Plan
One engagement, whether or not you've gone through the Get Unblocked track.
| Step | How it works | Who's involved | What you get |
|---|---|---|---|
| The review meeting | I review how your system is built and shipped, looking for controls that belong upstream: manual checks you can automate, fixes that belong in code, and evidence you can produce once instead of every security review cycle. You walk me through your pipeline and codebase with the engineer who owns them. | You, that engineer, and me | My read on what can move upstream |
| The plan document | I write up each control, where it lives in your pipeline or your code, and the evidence it produces on its own. This way, the next security review starts with fewer findings and the evidence already in hand. | Me | The Shift-Left Plan |
| Guided Execution meeting | If you want, I guide your engineers as they put the controls in place, in working sessions like Guided Remediation's. It is priced separately. | Your engineers and me | The controls in place |
If you're interested in the Stay Unblocked track, on its own or as a continuation of the Get Unblocked track, let me know when you book your First Look.