Skip to content
Enterprise Sight
Talk to us →
04 / 06

Five phases.
A fixed exit.

We set Mosaic up properly, tune it, test it, then hand it over. The phases overlap deliberately, and security hardening runs through them. Every engagement is bespoke, so we scope the timeline with you.

Engagement phases

PHASE 01

Surface mapping

We find every model, agent and exposed surface in your estate, sanctioned or not, and threat-model what we find. A 30-minute call comes first. If there's a fit, we draft a proposal with scope and timeline. If there isn't, we'll say so.

  • Model and agent inventory
  • Exposed surface map
  • Threat model
  • Risk register opens
PHASE 02

Compliance design

We map the policy engine to your regulatory controls with your risk team, and plan the security hardening. Your risk team can pre-read the policy design and audit schema before anything is deployed.

  • Control mapping with your risk team
  • Policy engine design
  • Audit schema
  • Security hardening plan
PHASE 03

Core deployment

Mosaic is deployed into your data center or cloud account and connected to your providers. Deployment, not development. Security hardening is part of the work.

  • Mosaic in your environment
  • Providers and data sources connected
  • Security hardening
  • Audit trail live from day one
PHASE 04

Stress testing

Integration and acceptance testing, then governance testing and cost-control testing. We configured it. Now we prove it solves your problem.

  • Integration testing
  • Acceptance testing
  • Governance testing
  • Cost-control testing
PHASE 05

Fixed exit

Handover, runbooks and assurance. The engagement closes with a working deployment and the documentation your team needs to run it without us in the room.

  • Handover
  • Runbooks
  • Assurance
  • Your team runs it

Engagement commitments

Fixed exit.

The engagement ends when your team can run Mosaic. Handover, runbooks and assurance are part of the plan from day one.

Deployment, not development.

We deploy Mosaic into your environment and connect your providers. We don't build you a custom system.

Your system.

It runs in your network, so it is yours. We set it up properly, tune it, test it, then hand it over.

The earlier the better. Map the estate before the next project stalls.

Start a 30-minute conversation →