Begin with the decision, the evidence available and the consequence if the reported delivery position is wrong.

An initial assurance discussion should establish whether independent scrutiny is necessary, what must be protected and whether Enigma can operate with sufficient access and authority to add value.
Useful information to provide
- The programme, supplier or technology investment concerned.
- The decision or milestone approaching.
- The current reported position and why confidence is uncertain.
- Known disputes, gaps or unresolved dependencies.
- What evidence exists and who controls access to it.
- The governance route that would receive the assurance conclusion.

What happens next
- Enigma determines whether the issue is suitable for independent assurance.
- The assurance mandate, exclusions and required access are defined.
- The appropriate engagement model and disciplines are identified.
- Any actual or perceived conflict of interest is declared.
- A concise scope and expected outputs are agreed.
No predetermined conclusion
Enigma will not accept an engagement where the expected outcome is reassurance rather than an independent assessment of the evidence.