Fri Apr 8 06:51:39 PDT 2016

Overarching: How does the enterprise describe itself and why this effort is being undertaken?


[Company name] ([Abbrev.]) is a [micro- / small- / medium- / large- ] [business type and nature]. They [one simplistic sentence version of what they do - not from standard corporate literature]. They operate at revenues of ~[#] and have assets valued at about $[#].

[Abbrev.] has [~#} workers of which [#] are employees and [# are type ...]. They operate at [# locations] of [# types] [describe types]. They have [#] computers per employee and [#] computers per [site type]. They also support [different types of information-related things and sorts].

[Abbrev.] asked [US] to undertake this [study / initial assessment / periodic review / protection posture assessment / emergency review / other] to [assess / review / characterize / identify / etc.] [details].


The description is up to them. An example is:

Management Analytics (MA) is a small consulting and litigation support firm specializing in information protection. They help clients make better decisions about information protection, and serve as expert witnesses in high-valued litigation matters. They operate at about $1M/y in revenues and have physical assets of ~10,000 and information assets of unidentified total value.

MA uses about 15 workers. It has one employee (the CEO) and the rest are specialized top-flight experts in their respective fields. They each operate from their homes or small office locations. MA has about 20 computers, predominantly Linux/Unix/OSX/Android including laptops, pads, and laptops acting as servers. Each worker also has a few computers they use for MA purposes. They also support cellular "smart-phones" and other similar mobile computing devices.

MA asked Management Analytics to undertake this periodic review to identify potential changes in strategic outlook


The description is up to the Client. The information is used throughout the process to help characterize the different facets of the business and how they relate to the protection program.

Copyright(c) Fred Cohen, 1988-2015 - All Rights Reserved