Reality before reassurance
We would rather name an uncomfortable vulnerability than validate an inadequate plan.
IN PRACTICE
Findings are stated plainly and traced to the document, decision or dependency they come from.
← About/Our Principles
How wegive advice
Seven commitments govern our judgement: what we will say, what we will not sign off, and what we leave behind when the work is done.
01
Preparedness over documentation
A plan has value only if people can execute it.
IN PRACTICE
Readiness is judged by what people can do unaided, not by what has been written down.
Independent judgement
Our responsibility is to the resilience of the organisation, not to confirming the expected answer.
IN PRACTICE
We report what the evidence shows, including when it is not the conclusion that was hoped for.
Proportionality
Resilience should reflect the consequence of failure and the operating environment, not a maximum standard applied indiscriminately.
IN PRACTICE
The depth of work follows what is at stake. Not every function needs the same hardening.
Capability stays with the client
The objective is a stronger organisation, not a permanent adviser.
IN PRACTICE
Plans, drills and decision rights are built to run without us in the room.
Confidentiality
Operational vulnerabilities, dependencies and response arrangements are treated as sensitive information by default.
IN PRACTICE
What we learn about an organisation's weaknesses is used for that organisation's resilience and nothing else.
Grounded in operational reality
Advice starts from how the organisation actually runs — its dependencies, decisions, people, systems and constraints — not from an abstract model.
IN PRACTICE
Recommendations are checked against how decisions, shifts and dependencies actually work in the organisation before they are written down.
How the work itself is structured — exposure, design, testing and embedding — is set out in Our Approach.
Written, tested,and left readyto execute
Not advice and not a document. The plan is installed, rehearsed on shift, and handed over in a state it can be run in.