Methodologies & standards
How delivery is controlled and made reproducible across engagements.
Every engagement follows the same control loop: written authority, written scope, controlled analysis or testing, and a report that separates observation from inference. Methods are matched to the artefact and the question, not to a marketing list of tools.
What we always do
- Refuse work without documentary authority for the exact target
- Record scope, exclusions and rules of engagement before intrusive work
- State confidence explicitly in findings
- Keep this public website off the evidence path
Framework language
Essential Eight, ISM, ISO/IEC 27001 and similar names are used only for the system and date in scope. They are not company-wide badges. See security audits.
Further operating facts
Hours, telephone, insurance, panels and similar claims are published only when they can be evidenced. They are omitted here rather than guessed.