Consulting Engagement Policy

1. From inquiry to engagement

A website inquiry begins a discussion; it is not an accepted order or binding commitment to a project, price, deadline, or outcome. We consider fit, availability, information needs, and conflicts before agreeing to work. Services and appointments require written confirmation or a signed engagement agreement.

2. Scope and responsibilities

Engagements may include strategic technology and operational assessments, AI or CMMC preparedness, cybersecurity governance, policy development, executive or board advisory, transaction diligence, and education. The written scope identifies the services actually included, evidence needs, assumptions, deliverables, and responsibilities.

Implementation, managed services, penetration testing, certification assessments, regulatory filings, and operational control are not included merely because related topics appear on this website. Any included activity must be expressly scoped, appropriately authorized, and performed by qualified parties.

3. Fees, timing, and changes

Fees, taxes, expenses, payment milestones, scheduling, rescheduling, cancellation, and any refund rights are defined in the applicable proposal or agreement before commitment. This page does not establish a universal retainer, automatic renewal, or nonrefundable charge. Scope changes and additional work require agreement. Client delays, access limitations, or changed assumptions may affect deliverables and timing.

4. Confidentiality and controlled information

Before exchanging confidential records, establish the relevant NDA or contractual terms and an agreed secure channel. Ordinary contact forms and unsolicited email are not authorized repositories for CUI, export-controlled data, credentials, or detailed security evidence. Identify classification, access, location, retention, and contractual restrictions before sharing.

Public use of client names, identifiable case studies, nonpublic results, or confidential materials requires appropriate authority. A portfolio reference does not waive a client’s confidentiality obligations.

5. Intellectual property and permitted reliance

The agreement determines ownership, licenses, reuse, and permitted reliance for client deliverables. Client-provided materials remain subject to the client’s rights. Pre-existing methods, templates, frameworks, know-how, and third-party material may have separate ownership and license terms. The fee alone does not resolve every right in a deliverable.

Distribution to boards, buyers, assessors, investors, vendors, or other third parties—and any right for them to rely on a report—should be expressly addressed. No public website policy silently changes an existing client agreement.

6. Professional independence

Assessments and recommendations reflect the agreed evidence and professional judgment. Management retains decision-making and implementation responsibility. Formal assurance, certification, and board appointments require their own appropriate authority. Conflicts and independence considerations must be disclosed and managed for the particular engagement.

Contact Christine Moffett LLC at he***@**************tt.com with the subject “Consulting engagement”. Do not include passwords, controlled information, or sensitive documents in an initial message.