ERMITS Advisory™ · Methodology
A three-branch progressive evidence model — delivering board-ready artifacts at every level of engagement, with no wasted motion between them.
01 · INTAKE
Lightweight entry, value before heavy evidence.
Required
Produces
02 · NORMALIZE
Standardized operational and regulatory indicators.
Required
Produces
03 · ACTIVATE
One update improves all three branches simultaneously.
Required
Produces
Every engagement starts at Level 1. Evidence unlocks the next level across all branches simultaneously.
Level 1 · Light
Level 2 · Structured
Level 3 · Evidence
Dependency Profile
Quick continuity narrative with minimal data.
Required
Vendor Exposure Pattern
Abstract benchmarking before named vendors.
Required
Dependency Graph
Critical vendor-to-service mapping.
Required
Regulatory Exposure Note
Jurisdictional pressure summary.
Required
Data Sensitivity Map
Category-level pressure drivers.
Required
Data Mapping Baseline
Processing inventory & flows.
Required
Ransomware Readiness
Fast leadership readiness view.
Required
Attack Surface Estimate
Asset-informed threat narrative.
Required
Control Mapping
Evidence-backed controls to assets.
Required
📋 Required
📎 Produces
🔓 Unlocks
| Engagement | Primary value | Typical artifacts | Typical data / evidence |
|---|---|---|---|
| Brief / Baseline | Fast board-ready exposure & readiness |
Brief HTML
Full Report PDF
Brief+ package
Request Brief+ → |
Minimal signals only: scope, geography, vendor reliance, governance baseline, and Brief questionnaire inputs mapped to Level 1 nodes. |
| Profile Refinement | Sharper scope & priority logic | L1 across all branches · Scoping brief | Level 1 artifacts plus targeted follow-up to validate priority branches and narrow scope. |
| Structured Evidence | Asset register, control context | L2 artifacts · Benchmarking maps · Exposure heat maps | Structured inventories and category-level evidence (assets, vendors, data classes, critical functions) per branch requirements. |
| Managed Engagement | Cross-domain reporting & remediation | Full L3 · Control mapping · Remediation workflow | Full evidence layer: asset-to-control mapping, recovery measures, substitution planning, and ongoing validation. |
→ Progressive evidence loop — collect enough for a justified artifact, then use it to request the next evidence layer.
Every artifact ERMITS Advisory delivers is designed to justify the next engagement.
10 minutes. Browser-only. No account required. Your responses auto-generate three Level 1 advisory artifacts.
Run the Brief →Talk to ERMITS about a structured engagement across your highest-pressure branch.
Book a review →