The Operational Trust Review · Operational Trust

What the Review produces

Every engagement delivers the same core outputs. No tiered packages, no add-on fees. The report is yours to keep and share — with your board, your insurer, or an enterprise client.

The written report follows a consistent structure: executive summary, supplier dependency map, findings by domain, prioritised action list, and a brief regulatory context section where NIS2 or DORA obligations are relevant.

📋

Pre-session questionnaireSent before the session. Structures your thinking. No surprise questions in the room.

🗺️

Supplier dependency mapStructured view of your key suppliers, their criticality, and your resilience posture for each.

📄

Written findings reportPrioritised findings with supporting references. Shared as a document, not a dashboard.

✅

Prioritised action listConcrete next steps ranked by risk and effort. Specific, ownable, actionable.

📞

Follow-up Q&A call30-minute call within two weeks of report delivery to work through findings.

The 90-minute session

The session is structured — not a free-form conversation. Each domain has allocated time. The pre-session questionnaire means we spend the session on decisions and gaps, not data collection.

Time	Domain	What we cover
0–10 min	Framing	Review scope, confirm key stakeholders and dependencies from questionnaire
10–30 min	Supplier risk	Critical supplier mapping, concentration risk, alternative arrangements, contract posture
30–50 min	Incident response	Detection, escalation, decision authority, communications, recovery sequence
50–65 min	SOP & governance	Process documentation, knowledge dependencies, decision authority during disruption
65–80 min	Regulatory context	NIS2 supplier obligations, DORA relevance, any sector-specific requirements
80–90 min	Close & next steps	Confirm scope of report, agree on follow-up call timing, any outstanding questions

Sample report extract

Every report follows the same structure. Executive summary at the front. Findings by domain. Prioritised action list. Regulatory context where relevant.

The extract below is illustrative. A redacted sample report is available on request.

Request sample report

OT-REVIEW · SAMPLE EXTRACTIllustrative only

Supplier dependency mapComplete

Incident response plan2 gaps found

Decision authorityUndocumented

SOP coverage4 / 9 processes

NIS2 supplier obligationsPartial

Tabletop exerciseNot conducted

Reviewer: [Lead Reviewer] · [date of issue] · For illustrative purposes only

Pricing

One fixed fee. No ongoing subscription. No tiered packages. The full Review — questionnaire, session, report, and follow-up call — for €2,400.

Travel costs apply for on-site sessions outside the Dublin/Leinster region. Confirmed at scoping stage.

Begin a Review

Operational Trust Review

€2,400

VAT exclusive · Fixed fee · No retainer

Pre-session structured questionnaire
90-minute review session (remote or on-site)
Supplier dependency map
Written report with prioritised findings
Follow-up Q&A call (30 min)

Travel costs for on-site sessions outside Leinster confirmed at scoping stage. Invoice issued on booking confirmation.

Scope & limitations

The Operational Trust Review is a structured advisory assessment. It produces a written report documenting current posture and identified gaps — not a compliance certificate, legal opinion, or guarantee of operational continuity. The Review does not constitute a technical penetration test or information security audit. Regulatory determinations rest with the relevant authorities. Coverage confirmed at pre-session stage.