Insights · Field note · Method and principles
Observe, Fortify, Verify, Evidence, Sustain: the method
Five steps, applied to a control environment or to a growth program, in the same order every time. Here is why the order matters.
Our method is five steps applied in order: Observe the environment, the risks, the obligations and the constraints before recommending anything; Fortify by strengthening practical safeguards without disrupting what already works; Verify that the controls perform as intended; Evidence the results in a form leadership, auditors, clients and partners can rely on; Sustain what was built through reporting, review and remediation over time. The same five steps govern a security engagement and a growth engagement, because both are about making something perform under scrutiny and proving it.
In detail
What the evidence shows.
Observe before acting
Most failed programs skipped this step. Assessment before assertion: what is actually in the environment, what the obligations are, what cannot change, what the buyers ask, who is cited today. The baseline taken here is what every later claim of improvement is measured against. Without it, improvement is a feeling.
Fortify without disruption
Safeguards are introduced to fit existing workflows, not to replace the systems that keep the organization running. In growth work the equivalent rule is that nothing is built that breaks what already brings in business: the migration keeps the rankings, the new site keeps the inquiries, the paid account is governed rather than torn down.
Verify, then evidence
A control is not a control until it has been tested. A page is not authority until its claims are verified and an expert has signed it. Verification produces the evidence, and evidence is written for the people who must rely on it without being able to check: the auditor, the insurer, the board, the engine.
Sustain
Controls drift and authority decays. Reporting, review, refresh cycles, re-testing and remediation keep what was built working. An engagement that ends at Evidence leaves the client with a snapshot; the method ends at Sustain because the value is in the system that keeps operating. See the method and the operating principles.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days