Day 0
Intake accepted
The five-business-day clock for the Essential Exposure Assessment starts after the scoped question, approved intake path, usable files, and accountable client contact are confirmed.
Paid assessment delivery specification
The Essential Exposure Assessment is a five-business-day commitment.
ApertureRisks delivers the Essential Exposure Assessment within five business days after accepted intake and scope confirmation. The clock starts only once the scoped question, approved intake path, minimum usable evidence, and accountable client contact are accepted, and a documented pause condition stops it until the blocking client dependency is resolved. The Expanded Exposure Assessment targets seven to ten business days after accepted intake and scope confirmation. Larger record counts, integrations, or analyst-assisted packages require a written scope.
Day 1
Structure and identity review
Validate file structure, tenant scope, supplier identities, and material evidence gaps. Return blocking data questions.
Day 2
Exposure baseline
Connect accepted supplier and operating records to the scoped exposure question. Unsupported claims remain not assessed.
Day 3
Evidence and scenario review
Review evidence quality, affected dependencies, and clearly labeled assumptions. No synthetic value is presented as client evidence.
Day 4
Decision Brief quality review
Prepare the exposure summary, confidence basis, evidence gaps, owner-based actions, and methodology references.
Day 5
Delivery and readout
Deliver the Decision Brief and action register, then hold the agreed readout or provide an asynchronous handoff.
When the clock pauses
- Required files are missing, corrupt, or materially outside the agreed structure.
- The exposure question or tenant scope changes after intake acceptance.
- Client clarification, evidence approval, or access authorization is outstanding.
- A security or data-handling concern requires resolution before processing.
Essential Exposure Assessment delivery includes
- One scoped exposure question
- Up to 50 accepted supplier and operating records
- Evidence-backed exposure baseline
- Evidence gap and action register
- One executive Decision Brief
- One delivery readout or asynchronous handoff