Decision guides

What should we do first?

Resolve material uncertainty, assign an owner and test a small number of important workflows.

Reviewed 18 September 2026 · Prahari DPO

Start with scope and urgent concerns

Identify the activities, decision-maker and missing facts. A current incident or unanswered live request belongs in the appropriate operational escalation route, not a later project phase.

Build a practical work sequence

First clarify responsibilities and important gaps. Then map selected flows, improve the required working documents and test handovers. Finally review evidence, train the relevant teams and agree maintenance.

Make completion observable

Each action should name an owner, output, dependency and check. “Improve deletion” is vague; “test the approved retention rule for one record type and record exceptions” is reviewable.

Use the assessment appropriately

Answer anonymously, then provide contact details to generate and open your report in this browser. The generated priorities reflect your answers; human DPO review and any service scope are separate. A suggested 90-day sequence is a planning aid, not a statutory deadline.

Common questions

Should we wait until every answer is known?

No. Record unknowns and assign follow-ups while progressing work whose scope is clear.

Does submitting contact details start a paid service?

No. It saves your contact details and report. Sending an advisor enquiry is a separate, optional step. Any paid work needs an agreed scope.

Discuss the work you need

Agree the service, deliverables, responsibilities and fees before committing to an engagement.

Related reading

This page explains topics to scope and discuss. It does not establish applicability, certify compliance or confirm a paid engagement.

← Decision guides