Standing Review
Month-to-month senior judgment on your hardest exception cases, so the decisions hold up when an auditor reads them.
What you get
Case decisions: for each hard case you bring, a recommendation to grant, deny, or shorten, with the reasoning written so a stranger could defend it in a meeting you’re not in.
Aging watch: the items about to age into a finding, flagged before an auditor finds them.
Audit prep: review evidence for in-scope exceptions before the audit window, and walk through likely questions.
Cadence: one scheduled review each month, plus questions between reviews answered within 2 business days.
Who it fits
Teams that already have an exception process and need a senior second opinion on the judgment calls. It works as a follow-on to a Process Build or on its own.
What you send
The cases you want reviewed, before each session.
A current export of the queue.
A mutual NDA comes first. No specific tool is required: it works from your ticketing system, your spreadsheet, or whatever holds the queue today.
What sets the price
Two things: how many cases you bring each month, and whether an audit is in the window.
Who does the work
Glenn, directly. 17 years in IT, the last 6 in issues and exceptions management at large financial-services and SaaS companies, and author of The GRC Exception Handbook.
30 minutes, no charge
30 minutes, no charge
