Initial scoping
Start with the decision that needs evidence.
Share only the non-sensitive context needed to determine whether a point-in-time review fits.
Use the form for a short, non-sensitive brief, or write to the public address directly.
What to bring
Four details are enough to begin.
The change, concern, or deadline that prompted the review.
The users, workloads, or access paths that matter most.
The decision and people who need to use the result.
Known licensing, device, application, or timing constraints.
Do not attach evidence yet
Do not send passwords, recovery codes, tenant exports, customer names, or regulated information. The evidence method comes after authorization and written scope.
Define the review request
Describe the trigger, areas in question, and decision the review should support. A request starts preparation; it does not confirm scope, price, or timing.
After contact
A request is not an engagement.
Confirm whether the need fits.
Name the reviewer and confirm relevant experience.
Agree scope, exclusions, access, deliverables, and terms.
Authorize the work in writing before evidence collection.