Technology Leadership Assessment

Three weeks. A clear-eyed read on your technology, and a plan.

Most technology assessments are free because they are marketing for whatever the assessor sells. Ours is paid because the deliverable is the product: an independent, executive-grade diagnosis of your technology and a 12-month plan you own outright.

Many clients continue into a retainer. Some take the roadmap and run it themselves, or hand it to their existing provider. Both are good outcomes, because the assessment is designed to stand on its own.

Fixed fee$12,500Three weeks, start to readout

A portion is credited against your first quarter if you continue into a Growth or Executive retainer, agreed when we scope it.

How the three weeks run

Fifteen working days, with what we need from you stated up front rather than discovered halfway through.

Week 1

Discovery

Establish what is true, and get evidence moving before it becomes the critical path.

Scope and kickoff

Days 1 to 2
  • Kickoff call, 60 to 90 minutes, with the sponsor and whoever owns technology today, whether that is an internal manager or your provider's account manager.
  • Scope agreed in writing: which entities and sites are in, which systems are out, who gets interviewed, and what finished means. Scope that lives in an email is scope that gets argued about at the end.
  • Your workspace opens. Participants are invited, and each of the eight domains is assigned as advisor-led or client-led so nobody is waiting on anybody.
  • The evidence request list is issued, every item carrying a stated purpose and a named owner.

Interviews

Days 3 to 5
  • Five to eight conversations, 45 minutes each: the sponsor, your operations lead, your IT manager or provider account manager, finance for the spend picture, and one or two functional leads who use the systems every day.
  • The questionnaire opens in parallel, so domain owners can start while interviews are still running.

What we ask you for

Identity
Sign-in export from your identity provider. Read and aggregated in the browser, never uploaded.
Endpoints
Device inventory export: operating system, version, encryption status, last seen.
Software
Licence entitlement against licence assignment.
Spend
Twelve months of technology spend from the ledger, or accounts payable by vendor.
Contracts
Your provider agreement, key software agreements, and any master services agreements.
Infrastructure
Network documentation, backup configuration, and the date of the last restore test.
Insurance
The cyber policy schedule and the application that was submitted for it.
Governance
Security, access, acceptable use and incident response policies; the technology org chart; any current roadmap or budget.
Your time this week

6 to 9 hours across everyone involved. About two of those are the sponsor's.

Where you are on Friday

Scope agreed in writing, workspace live, evidence checklist issued with an owner against each item, interviews done or booked, questionnaire started.

Week 2

Analysis

Turn evidence into scored findings you can argue with.

Evidence and instrument

Days 6 to 8
  • Outstanding requests chased. The workspace tracks what is open and who holds it, so nothing depends on somebody remembering.
  • Exports parsed into computed facts: multi-factor coverage and its exceptions, dormant and orphaned accounts, sign-ins from unexpected countries, endpoint support status and encryption coverage, licences bought against licences assigned, and spend by vendor with duplicates caught under two different names.
  • Contract terms extracted: term, renewal date, notice window, and price escalators.
  • The instrument completed: around 150 questions across eight domains and forty capability areas, each answer anchored to a described maturity level rather than a gut score.

Scoring and findings

Days 9 to 10
  • Weighted scores computed with the derivation visible, so you can see which answers produced each number.
  • Benchmarked against the peer set for your size and industry.
  • Findings drafted against the evidence, then read and edited by a person before any of it becomes a deliverable.
  • Risk register built, ranked by business impact, every entry carrying a named owner and a review date.
  • Vendor and contract register built with renewal dates, notice windows, and renegotiation targets.

A 30-minute call mid-week to surface anything uncomfortable early. Nothing in the readout should be new information to you.

Your time this week

3 to 5 hours, mostly follow-up answers and completing the questionnaire sections assigned to your team.

Where you are on Friday

Scored across all eight domains, both registers populated, every finding backed by evidence, roadmap in draft.

Week 3

Roadmap and readout

Convert findings into decisions somebody owns.

The roadmap

Days 11 to 12
  • Sequenced by return and dependency, not by vendor convenience.
  • Three to five meaningful moves, not a forty-item wishlist.
  • Each one carries an owner, a budget range, and the value driver it moves: revenue, margin, risk, or valuation.
  • Quick wins separated from structural work, so the first ninety days are obvious.
  • The pre-read goes out 48 hours before the session.

The readout

Days 13 to 14
  • A 90-minute working session with your executive team: the scorecard, the top risks, the spend findings, and the roadmap.
  • Built to be argued with rather than presented at. Challenge in the room is the point.
  • Decisions captured during the session: accepted, deferred, or owned by name.

Handover

Day 15
  • Six deliverables issued: scorecard, risk register, spend analysis, vendor and contract review, twelve-month roadmap, and executive summary.
  • The workspace stays live, so the registers stay current instead of ageing into a PDF.
  • The next step is recorded either way: a retainer, execution with your own team, or nothing at all.
Your time this week

2 to 3 hours, including the pre-read.

Where you are on Friday

Six deliverables in your hands, a roadmap with named owners, and a recorded decision about what happens next.

Total time from your team

Around 12 to 17 hours of your organisation's time across the three weeks.

What moves the date

The three weeks assume evidence arrives within five working days of kickoff. It is the one thing that moves the date, so we say it at the start rather than explaining it at the end.

The eight domains we score

Every assessment scores the same eight domains, each against what a company of your size and stage should expect, so “we’re behind” becomes “we’re behind here, and it matters this much.” Here is what we look at in each, and the questions the readout answers. Open any domain for the full detail.

Infrastructure & Cloud

The foundation everything else runs on.

What we examine
  • Servers, network, and endpoint estate: age, support status, and single points of failure
  • Cloud posture: what has moved, what should, and what it costs either way
  • Backup and disaster recovery: tested recovery, not just green checkmarks
  • Capacity against your growth plan for the next 24 months
Questions the readout answers
  • If our biggest system failed tomorrow, how long would we actually be down?
  • Are we running infrastructure a company our size should have outgrown, or outsourced?
Explore this domain

Security & Risk

Measured against your real threat model, not a vendor checklist.

What we examine
  • Identity and access: MFA coverage, admin rights, and departed-employee hygiene
  • Core controls: patching, email protection, endpoint detection, network segmentation
  • Incident readiness: who does what in the first hour of a ransomware event
  • Alignment with cyber-insurance requirements and customer security questionnaires
Questions the readout answers
  • What would a ransomware event actually cost us, and how likely is it today?
  • Can we answer our largest customer’s security audit without a fire drill?
Explore this domain

Business Applications

The systems your operations actually run on.

What we examine
  • Core platforms such as ERP, CRM, and line-of-business systems: fit, version, and support status
  • Integration map: where data flows automatically and where people re-key it
  • Customization debt that locks you into old versions or single individuals
  • Adoption: what you pay for versus what your teams actually use
Questions the readout answers
  • Is the platform every vendor wants to replace actually the problem, or is it configuration?
  • What is the true cost and risk of the big system decision we keep deferring?
Explore this domain

Data & Reporting

One version of the truth, fit for a board.

What we examine
  • Where the numbers your leadership relies on actually come from
  • Manual assembly: reports built by hand from systems that don’t talk
  • Data quality and ownership: who fixes it when the numbers disagree
  • Reporting readiness for lenders, investors, and board meetings
Questions the readout answers
  • Why do two reports of the same metric disagree, and which one is right?
  • Could we produce diligence-grade reporting in a week if a buyer asked?
Explore this domain

Vendors & Contracts

Read with your interests alone in mind.

What we examine
  • MSP agreement: scope, SLAs, and what the contract actually commits to
  • Licensing agreements and renewal dates, including the auto-renewals nobody tracks
  • Vendor accountability: who reviews performance, and against what
  • Concentration risk: which vendors could hurt you and how locked in you are
Questions the readout answers
  • Is our MSP contract fair for what we have become, and how would we know?
  • Which renewals in the next 12 months are negotiating opportunities?
Explore this domain

Spend & Budget

Every dollar mapped, benchmarked, and challenged.

What we examine
  • Total technology spend, including the subscriptions hiding in expense reports
  • Redundant and overlapping tools accumulated one urgent purchase at a time
  • Benchmarks against companies of your size and industry
  • Budget process: how spend gets approved, and whether returns are ever checked
Questions the readout answers
  • What do we actually spend on technology, and what should it be?
  • Where is the waste, and what would cutting it break?
Explore this domain

People & Organization

The humans behind the systems.

What we examine
  • Internal IT capability against what the company actually needs
  • Key-person risk: what only one individual knows how to do
  • Sourcing model: what belongs in-house versus with providers
  • Skills and development paths for the team you already have
Questions the readout answers
  • If our IT lead resigned Friday, what breaks Monday?
  • Are we staffed for the company we were, or the one we are becoming?
Explore this domain

Governance & Roadmap

How technology decisions get made, and whether they stick.

What we examine
  • Decision rights: who can commit the company to technology spend
  • Prioritization: how projects get chosen, sequenced, and killed
  • Project discipline: why initiatives run long, and what finished means
  • Planning horizon: whether technology has a roadmap or just a backlog
Questions the readout answers
  • Who owns our technology roadmap: a name, not a company?
  • Why do our technology projects always take longer than promised?
Explore this domain

What you walk away with

  • Technology scorecard across eight domains and forty capability areas, with the derivation shown, so you can see which answers produced each score
  • Risk register ranked by business impact, every entry with a named owner and a review date
  • Spend analysis: what you pay, what it should cost, and where the same vendor appears twice under two names
  • Vendor and contract review with renewal dates, notice windows, and renegotiation targets
  • 12-month roadmap with priorities, owners, and budget ranges
  • Executive readout, written for your board rather than your server room

And a workspace where it stays true

A PDF is accurate on the day it is sent. Six weeks later a contract has renewed, two risks have been treated, and nobody can tell which parts of the document still hold. So the findings do not arrive as a document alone. They arrive in a workspace you sign into, where the risk register, the contract dates, the spend lines and every document we issue are live records rather than a snapshot.

You keep it whether or not you continue into a retainer. If you take the roadmap and run it yourself, the register goes with you. That is the point of paying for the assessment rather than accepting a free one.

Is it for you?

  • 50 to 500 employees, with technology decisions landing on the CEO or CFO desk
  • A trigger event on the table: acquisition, MSP renewal, major system decision, compliance demand, or investor diligence
  • Willing to hear findings straight, including "your current provider is fine"
  • Looking for a free audit that ends in a sales pitch. That is not what this is

Start the conversation

A thirty-minute intro call to hear what triggered the search and tell you honestly whether the assessment will pay for itself. If it won't, we'll say so.