Systems Risk Report
A structured view of the operational and technical risk behind the KPIs. Delivered over 5 to 10 business days, designed for underwriting decisions, confirmatory diligence, or post-investment value protection. Independent by design — we do not implement the remediation, so the assessment has no built-in commercial bias.
When this is the right call
For VCs, boards, acquirers, and family offices conducting pre-investment, confirmatory, or post-investment risk reads on a target company. The Systems Risk Report delivers an independent, evidence-based assessment of operational and technical risk in 5–10 business days — formatted for an investment committee or board decision.
- ─KPI performance is strong but delivery controls are unclear.
- ─Architecture risk and technical debt economics are opaque.
- ─Key-person dependency and governance maturity are unknown.
- ─Atoms–Bits coupling risk may materially affect outcomes.
- ─Post-investment value protection plan is not operationalized.
If you need legal or financial audit, this is not the right partner. If you want findings pre-negotiated with the target, this is not the right partner.
What the report contains and how it's produced
- 01/05Day 1
Scoping and NDA
Scoping call with the requesting party (investor, board, acquirer). Assessment boundaries, recipient list, and access scope confirmed. NDA signed before data access is granted.
- ─NDA + scope of assessment
- 02/05Days 2–6
Evidence collection
Documentation review, system access, structured interviews with three to five stakeholders at the target company. Evidence tied to observable signals — not narrative.
- ─Evidence pack
- 03/05Days 6–8
Independent analysis
Risk taxonomy built across delivery, architecture, and operating model. Severity and likelihood scoring. Mitigation options drafted for each material risk.
- ─Risk taxonomy and scoring
- ─Delivery health assessment
- ─Architecture risk review
- ─Operating model evaluation
- 04/05Days 8–9
Draft review
Draft report shared with the requesting party. Factual accuracy confirmed before final delivery. Open questions resolved.
- ─Draft report — reviewed with the requesting party, not the target
- 05/05Day 10
Final delivery
Final report delivered. Optional confidential briefing for the investment committee or board — live walkthrough of findings and Q&A.
- ─Prioritized mitigation roadmap
- ─Executive summary
- ─Optional confidential briefing
Outcomes
- ─Report delivered within the agreed 5 to 10 business-day window.
- ─All material risk areas identified, scored, and evidenced.
- ─Mitigation recommendations actionable within a 90-day horizon after investment or decision.
- ─Executive summary formatted for committee or board consumption without rework.
- ─Factual accuracy of the final report confirmed by the requesting party — not by the target.
What you commit to
Inputs
- 01NDA signed before any data access is granted.
- 02Read access to codebase, infrastructure, project management tools, and relevant documentation at the target company.
- 03Availability of three to five key stakeholders for structured interviews during the engagement window.
- 04Clear definition of who receives the final report — and who does not.
- 05Acknowledgement that the assessment is independent: findings are not pre-negotiated with the target.
What this is not
Out of scope
- 01Implementation of any remediation — the engagement is assessment-only by design.
- 02Ongoing advisory or monitoring after report delivery.
- 03Legal, financial, or compliance auditing. We cover operational and technical risk — not statutory audit.
- 04Valuation, financial modeling, or deal structuring.
- 05Pre-negotiated findings — the report is independent and the requesting party does not shape the conclusions.
Start with a scoping conversation.
A 30-minute call to confirm fit, map constraints, and propose the smallest viable scope for this engagement. If the context is not right for what we do, we say so before the call ends.