From planning to report delivery.
Every engagement follows a structured, predictable path. Here is what to expect at each phase.
Process
How an engagement works
Plan & Scope
Define system boundaries, select Trust Services Criteria, align on timeline and deliverables.
Evidence Intake & Mapping
Collect and organize evidence, map controls to criteria, identify gaps early.
Control Testing & Exception Handling
Test control design and operating effectiveness, document exceptions with context.
Reporting & Executive Readout
Deliver the attestation report with clear findings, recommendations, and a stakeholder walkthrough.
Phase 1: Plan & Scope
Define system boundaries, select applicable Trust Services Criteria, identify key stakeholders, and align on the engagement timeline. You will receive a scoping document and evidence request list.
Phase 2: Evidence Intake & Mapping
Collect and organize evidence against controls. AI-assisted classification helps identify gaps early. You will receive a control-evidence mapping and completeness report.
Phase 3: Control Testing
Test control design and operating effectiveness. Exceptions are documented with full context and remediation notes. You will receive a draft findings summary.
Phase 4: Reporting & Readout
Deliver the final attestation report with the auditor's opinion, findings, and recommendations. An executive readout walks stakeholders through the results.