Scope Builder — Assemble an Engagement Scope

Which engagements apply

0 of 6 selected

Six engagements, in four categories. Pick as many as apply; the summary de-duplicates whatever they have in common.

Inventory

Establish what cryptography exists across the estate, where it lives, and how exposed each asset is. Everything else in this catalogue reads the register this produces.

Estate InventoryDiscovery of cryptographic use across source trees, dependency manifests, build chains, configuration and certificates, delivered as a CBOM and a scored register.Read the full scope

Review

Go deep on one layer: transport and PKI, signing and identity, or key management. A review assumes the layer matters enough to warrant more than an inventory entry.

Transport & PKI ReviewA review of X.509 chains, issuance and expiry, TLS terminators, cipher suites and key exchange, mutual TLS, and the internal certificate authorities behind them.Read the full scope

Signing & Identity ReviewA review of code signing and artefact provenance, token and assertion signing, document signing, and SSH host and user keys across the estate.Read the full scope

Key Management ReviewA review of KMS and HSM key inventory, rotation and custody boundaries, secrets stores, key lifecycle and escrow, and algorithm agility at the key layer.Read the full scope

Engineering

Turn a scored register into an ordered programme of change, with a rollback at every step and the performance impact measured on your own workload first.

Migration EngineeringSequencing, hybrid deployment, rollback preservation and measured performance proof, so a post-quantum change ships with evidence rather than optimism.Read the full scope

Briefing

Take an exposure position into the room where budget is allocated, and leave with decisions, owners and a sequence an auditor can follow.

Executive BriefingA working session that turns an exposure position into a board-legible decision: what expires when, what deferring changes, and what the next cycle of work buys.Read the full scope

Which surfaces are in your estate

0 of 5 selected

Marking a surface is what makes the summary useful. Any surface you mark that none of your selected engagements covers is reported back as a gap rather than left implied.

Transport and PKITLS terminators, X.509 chains, internal certificate authorities, mutual TLS between services, and the expiry calendar behind all of it.Signing and identityCode and artefact signing, token signing, SAML and OIDC assertion signing, document signing, and SSH host and user keys.Key managementManaged key services, hardware security modules, secrets stores, rotation and custody boundaries, escrow and destruction.Source tree and build chainRepositories, dependency manifests, resolved library versions, container base images, and the pipelines that sign what you ship.Evidence and audit packThe reproducible pack an auditor, regulator or customer receives: register extract, attestation reference, hashed evidence and the method version behind each figure.

Assemble a scope from the catalogue

Which engagements apply

Which surfaces are in your estate

Nothing selected yet