01 — Understand the operating picture
Identify the business outcome, platforms, service owners and current support. Record what works, what is uncertain and where a failure would matter most. The RFP tool turns these inputs into a proposed shortlist with a rationale.
02 — Agree the service boundary
Separate assessment, implementation, monitoring, response and leadership. Confirm delivery personnel, tools, access, hours, data handling, commercial terms and acceptance. Approve changes through your established process.
03 — Establish controlled access and prove readiness
Use named access, minimum necessary permissions and agreed contacts. Introduce sources and controls in stages. Test communication and approval as well as the technology. Existing provider handover belongs in the plan.
04 — Deliver and record agreed work
Keep accepted scope, actions, exceptions and unresolved decisions visible. For monitoring requirements, verify source health and investigation ownership. For advisory work, connect programme actions to people who can implement them.
05 — Review and adapt
Review service evidence against the agreement, especially critical gaps and overdue actions. Changes to platforms, suppliers, hours or risk appetite may require scope changes. Maintain an exit plan that keeps your organisation in control.
Build your services RFP to match your platforms and support needs, or send an enquiry with your NDA or RFP.

