Skip to content
Anabel Group

An Assessment Process Designed to Produce Defensible Findings

We structure engagements so that scope, evidence, testing, findings and remediation are traceable from the first discovery discussion to the final report.

Assessment phases

  1. 01

    Engagement acceptance

    Confirm objective, client identity, conflicts, independence considerations and high-level scope.

  2. 02

    Scoping

    Define business processes, systems, applications, infrastructure, data flows, third parties and locations.

  3. 03

    Evidence planning

    Issue a structured evidence request and identify stakeholders for interviews and demonstrations.

  4. 04

    Evidence collection

    Review policies, procedures, architecture, configurations, reports, records and technical evidence.

  5. 05

    Control testing

    Use examination, interview, observation and technical testing where applicable to the agreed scope.

  6. 06

    Findings & risk

    Document evidence, affected assets and processes, risk, impact and recommended action.

  7. 07

    Quality review

    Perform internal quality review before delivery to the client.

  8. 08

    Final report & roadmap

    Issue the final report and a prioritized remediation plan; optionally review remediated items.

Finding structure

Each finding contains the following elements, so that a reader can trace what was observed, what evidence supports it and who owns the response.

  • Unique identifier
  • Title
  • Description
  • Affected asset or process
  • Evidence
  • Control objective or assessment criterion
  • Risk statement
  • Business and technical impact
  • Recommendation
  • Owner
  • Target date
  • Status

Risk rating

We use a documented scale applied consistently across an engagement:

  • Critical
  • High
  • Medium
  • Low
  • Observation

The exact scoring model is defined in our internal methodology and applied consistently. Client-specific scoring logic is not published.

Independence & professional integrity

We seek to maintain objectivity throughout our assessment activities. Potential conflicts of interest are identified and evaluated before engagements are accepted. Assessment findings are based on evidence gathered during the engagement.

Read our principles

Request an Assessment

Tell us what you need to assess, your target timeline and the environment involved. We will review the scope and identify the appropriate next step.

Request an AssessmentExplore Services