Standing Review

Month-to-month senior judgment on your hardest exception cases, so the decisions hold up when an auditor reads them.

What you get

  • Case decisions: for each hard case you bring, a recommendation to grant, deny, or shorten, with the reasoning written so a stranger could defend it in a meeting you’re not in.

  • Aging watch: the items about to age into a finding, flagged before an auditor finds them.

  • Audit prep: review evidence for in-scope exceptions before the audit window, and walk through likely questions.

  • Cadence: one scheduled review each month, plus questions between reviews answered within 2 business days.

Who it fits
Teams that already have an exception process and need a senior second opinion on the judgment calls. It works as a follow-on to a Process Build or on its own.

What you send

  • The cases you want reviewed, before each session.

  • A current export of the queue.

A mutual NDA comes first. No specific tool is required: it works from your ticketing system, your spreadsheet, or whatever holds the queue today.

What sets the price
Two things: how many cases you bring each month, and whether an audit is in the window.

Who does the work
Glenn, directly. 17 years in IT, the last 6 in issues and exceptions management at large financial-services and SaaS companies, and author of The GRC Exception Handbook.

30 minutes, no charge

30 minutes, no charge