- What we look at
- Dependency mapping, patch status, test and regression coverage, recovery readiness and the architecture the business runs on, with a target architecture where change is needed.
- What it means for the business
- Risk-ranked priorities, each with what it means for cost, timing and the plan, and cost and timeline ranges for addressing it.
- What is uncertain
- Where the evidence available in the time allowed is incomplete, the report says so and what it would take to close the gap.
- What happens next
- A recommended sequence, including a clear 'wait' option where that is the right call.
- How independence is handled
- The assessment is a standalone deliverable. It is read-only: we change nothing while we assess. Any later implementation is scoped and priced separately, and the report stands on its own whoever does the work.
- How it is bought
- Timeboxed and quoted before you commit. Scope and timing are confirmed before it begins.