_edited.jpg)
Get Clarity on Your Data Risk
A practitioner-led assessment of how your business collects, uses, and protects data. Not a generic checklist.
What's solid. What's a gap. And what to fix first.
Photo by Go Peak Walking on Unsplash
Our Method
Photo by Thilina Alagiyawanna on Pexels.
1. Start with a scoping call. Schedule a short call. We'll discuss your business, what's driving your need for stronger data practices right now, and whether ElderCairn is the right fit for you.
2. Scope the engagement. If it's a fit, we walk through a structured set of questions about your data environment either live on that call or at your own pace afterward. This is what determines what your Diagnostic needs to cover.
3. Review your estimate. You receive a fixed price quote based on the actual complexity of your business, not a one-size-fits-all number, with a summary of what we discussed so that you can flag anything before it's final.
4. We do the work. Once the engagement is confirmed, we conduct the Diagnostic - reviewing your data inventory, vendor relationships, controls, and exposure against the standard your business actually needs to meet.
5. You get a report, not a lecture. The deliverable is a clear prioritized report. What's working, what's missing, and what to do about it first.
Three Levels of Depth, One Standard
Every Diagnostic follows the same rigorous process. What changes is the depth of the review required based on the nature of your business.
Sandstone — Foundation.
Limestone — Standard.
Granite — Advanced.
For simpler businesses building their data practices from the ground up.
For businesses with more moving parts — several vendors, employee data, multiple locations.
For businesses in regulated or higher-risk categories, or operating internationally.
Your scoping conversation determines which level fits your business. You'll never be sold a level you don't need.
Is The Diagnostic Right For You?
Schedule a Scoping Call to Findout
The Diagnostic tends to be the right fit if:
- You're entering a new market, industry, or regulatory environment and want to get your data practices right before problems start.
- A client, partner, or vendor has asked about your data practices, and you weren't fully sure how to answer.
- You know you need to do something about privacy - you're just not sure what, or where to start.
It's not the right starting point if you're in the middle of an active incident, breach, or legal matter. If that's where you are, you need an attorney first - tell us on the call and we'll point you in the right direction.
Photo by Jon Tyson on Unsplash