Engagement models

Choose the shape of the work.

Every engagement is scoped in writing before it starts. These are the five ways clients work with us, and how each one is scoped, priced and governed.

Fixed-scope project

A defined product, integration or assessment delivered against an agreed specification and acceptance criteria.

Two weeks to six months

Best for: Requirements that are well understood and unlikely to change materially
Assessments such as penetration tests and readiness reviews
Procurements that require a fixed commitment
How it is scoped: A short paid or unpaid discovery produces a written specification, acceptance criteria and a list of assumptions. Anything outside that specification is handled through a documented change request.
Commercials: Fixed price against the agreed specification, invoiced on milestones tied to accepted deliverables rather than elapsed time.
Governance: A named engagement lead, fortnightly progress reviews against milestones, and a formal acceptance step for each deliverable.

Dedicated team

A senior, cross-functional team working inside your roadmap and priorities, with continuity of people.

Six months or longer

Best for: Products whose scope evolves as users and policy change
Organisations building internal capability alongside delivery
Modernisation programmes delivered in phases
How it is scoped: We agree the team shape, the outcomes for the first quarter and the working practices. Scope is managed through a shared backlog prioritised by your product owner.
Commercials: Monthly team rate based on the agreed team composition, with notice periods for scaling the team up or down.
Governance: Delivery reviews each cycle, a quarterly outcomes review with sponsors, and the same quality gates applied to every change.

Managed service

Ongoing operation of cloud platforms, applications or security monitoring under defined service levels.

Twelve months, renewable

Best for: Systems that must be monitored and supported around the clock
Organisations without an in-house operations or security operations team
Systems handed over after a Resolv build
How it is scoped: An onboarding assessment establishes the assets in scope, their current condition and the service levels that are achievable, before the service starts.
Commercials: Monthly fee per managed asset or per user, set by the service tier and the hours of cover required.
Governance: Monthly service reports against service levels, incident reviews, and a quarterly service and improvement review.

Retainer

Pre-agreed capacity available on call, for incident response or a steady flow of smaller pieces of work.

Twelve months

Best for: Incident response with defined response times
Recurring changes and enhancements to an existing system
Organisations that want a known supplier ready before they need one
How it is scoped: We agree the services covered, response times and the onboarding information we need in advance, so that work can start immediately when called.
Commercials: Pre-paid block of hours drawn down as used, with unused hours available for agreed proactive work such as exercises or reviews.
Governance: A monthly statement of hours used, a named contact, and a review of any incidents handled under the retainer.

Advisory

Senior expertise for decisions: architecture, security leadership, procurement support and board reporting.

A few days to an ongoing monthly commitment

Best for: Technology and security strategy
Independent review of a vendor proposal or design
Virtual CISO and board-level security reporting
How it is scoped: A short brief sets the questions to be answered, the decisions to be supported and the time available.
Commercials: Day rate for the advisers involved, either called off as needed or as a fixed number of days each month.
Governance: Written recommendations for each engagement, with decisions and open questions recorded.

Not sure which model fits?

Describe the problem. We will recommend a model and scope it in writing.