How it works
01
Northstar does: Understand the business context, objectives, and trigger for the engagement.
Client provides: A concise overview of systems, responsibilities, concerns, and stakeholders.
Client receives: A shared view of what needs verification.
Typical decision: Which engagement and outcomes matter most.
02
Northstar does: Define systems, evidence, methods, and minimum necessary access.
Client provides: Approve scope and nominate practical contacts.
Client receives: Written scope, limitations, and access plan.
Typical decision: What is in scope and who can authorise access.
03
Northstar does: Review agreed records, settings, and operating evidence.
Client provides: Provide agreed documents and clarify context.
Client receives: Evidence observations and questions.
Typical decision: Which assumptions require verification.
04
Northstar does: Translate observations into risk, ownership, and action priorities.
Client provides: Participate in findings discussion.
Client receives: Executive findings and prioritised roadmap.
Typical decision: What to address first and who owns it.
05
Northstar does: Support practical remediation and regular review.
Client provides: Approve changes and coordinate IT or MSP work.
Client receives: Documented progress and updated evidence.
Typical decision: Whether a sprint or ongoing assurance is appropriate.
Access is planned before work begins. Northstar Shield requests only what is reasonably needed for the agreed objective, documents assumptions and limitations, and avoids using public forms for sensitive materials.