[ARCHER KNOX ENGAGEMENTS E.00/]

[ENGAGEMENTS / OPERATING MANDATES]

When Control Must Be Assigned

Engagements are built around ownership, not activity. Archer Knox works upstream to establish decision space before exposure, and enters decisively when conditions have already narrowed that space—bringing clear control, disciplined execution, and accountable judgment across intelligence, security, and operational risk.

[ARCHER KNOX ENGAGEMENTS / READINESS MOVES FROM PLAN TO FIELD.]

[CONTROL BEGINS BEFORE CONTACT. EXECUTION BEGINS BEFORE ARRIVAL.]

E.00.1/

Defined mandates. Clear scope. Named accountability.

Archer Knox operates as an assigned authority, not a vendor. Each engagement is structured around a specific mandate, with decision authority, escalation thresholds, and defensible outcomes.

Doctrine governs execution. Engagements establish the mandate, authority, and point of accountability.

E.01 /

Advisory & Intelligence

E.01.1 /

Security Consulting & Risk Advisory

Diagnosis and correction of fragmented or performative security programs. Advisory engagement without long-term operational takeover.

Open engagement →

S.01 / Diagnosis

Gaps Identified

Programs are examined for fragmentation, false confidence, policy drift, unclear authority, and untested assumptions.

S.02 / Correction

Controls Rebuilt

Recommendations are tied to operational reality, not theater, with priority given to consequence and execution.

S.03 / Transfer

Ownership Returned

The objective is not dependency. Advisory work restores internal clarity, control, and accountable decision flow.

E.01.2 /

Protective Intelligence & Threat Management

Identification, validation, and management of threat signals before escalation. Designed to reduce noise and prevent reaction-driven failure.

Open engagement →

P.01 / Detection

Signals Collected Early

Threat indicators, behavioral anomalies, access concerns, and environmental shifts are gathered before they become incident conditions.

P.02 / Validation

Noise Reduced

Signals are tested against source reliability, pattern, proximity, and consequence so leadership is not driven by unsupported alarm.

P.03 / Escalation

Response Thresholds Set

Findings are tied to action thresholds, ownership, and response options before urgency compresses decision quality.

E.01.3 /

Intelligence Collection & Analysis

OSINT, HUMINT, and fusion analysis when internal visibility is insufficient. Collection plans tied directly to decision requirements.

Open engagement →

A.01 / Requirements

Questions Drive Collection

Collection begins with the decision that must be supported, not with open-ended data accumulation.

A.02 / Fusion

Sources Integrated

Open-source, human, public-record, and environmental signals are fused into a usable intelligence picture.

A.03 / Assessment

Insight Converted

Analysis is translated into findings, confidence levels, and recommended actions for the responsible decision-maker.

E.01.4 /

Investigations & Case Direction

Privilege-aware investigations across corporate, litigation, and sensitive matters. Scope, collection, and reporting structured for scrutiny.

Open engagement →

I.01 / Scope

Questions Defined

The matter is framed around decision requirements, not curiosity, so collection remains disciplined and defensible.

I.02 / Collection

Evidence Controlled

Information is collected, preserved, and documented with chain-of-custody awareness and scrutiny built into the process.

I.03 / Reporting

Findings Made Usable

Conclusions are structured for counsel, executives, boards, or operational leads who must act on the record.

E.02 /

Testing & Active Response

E.02.1 /

Red-Team & Adversarial Testing

Adversarial testing of assumptions, controls, and defenses under real conditions, with remediation prioritized by risk.

Open engagement →

R.01 / Assumptions

Claims Tested

Security assumptions are challenged under realistic conditions rather than accepted because policy says they exist.

R.02 / Exposure

Weak Points Found

Physical, procedural, digital, and human vulnerabilities are examined as a connected operating surface.

R.03 / Remediation

Fixes Prioritized

Findings are ranked by consequence, exploitability, and operational urgency, not by volume.

E.02.2 /

Crisis Response & Incident Command

Stabilization of decision flow during active incidents. War-room cadence, validated signal picture, and enforced escalation control.

Open engagement →

C.01 / Stabilize

Decision Flow Restored

Immediate ambiguity is reduced by separating fact, assumption, exposure, and required action.

C.02 / Command

Cadence Established

Briefing rhythm, ownership, and escalation lanes are enforced so response does not fracture under pressure.

C.03 / Recover

Continuity Protected

Response is tied to recovery, documentation, after-action learning, and preservation of future operating capacity.

E.03 /

Operational Support

E.03.1 /

Mission-Specific & High-Risk Operations

Support for organizations operating in sensitive or hostile environments where consequences are human, legal, or geopolitical.

Open engagement →

M.01 / Context

Environment Read

Operational conditions, exposure, stakeholder posture, and mission constraints are evaluated before movement begins.

M.02 / Support

Capability Aligned

Support is shaped to the mission, whether advisory, protective, investigative, intelligence-led, or crisis-driven.

M.03 / Control

Execution Governed

Actions remain bounded by authority, legal posture, human consequence, and the requirement to preserve continuity.

E.04 /

Embedded Security Leadership

E.04.1 /

Fractional Chief Security Officer (FCSO)

Sustained security leadership for organizations that need Archer Knox capabilities carried beyond a defined engagement. Strategy, intelligence, response, implementation, and accountability are consolidated under a named executive mandate.

Open engagement →

F.01 / Integration

Capabilities Unified

Advisory, intelligence, investigations, testing, response, and operational support are coordinated through one security function.

F.02 / Implementation

Direction Sustained

Recommendations are carried into implementation, with priorities, owners, timelines, and escalation held under active executive oversight.

F.03 / Accountability

Authority Assigned

A named security lead maintains decision continuity and remains accountable as conditions, exposure, and organizational needs change.

E.05/

Protocols that get used on hard days

Harden people, facilities, movement, and events with operational guidance that’s validated by drills—not slide decks.

[View Playbooks SPB.00/]

E.06/

Engagement Guardrails

No engagement without defined mandate and decision authority.
No activity without documented legal basis and client authorization.
No intelligence delivered without sourcing, assumptions, and confidence.

Engagement Refusal Criteria

Requests intended to bypass legal, ethical, or regulatory controls.
Engagements seeking conclusions without evidence.
Situations where accountability cannot be assigned or enforced.

Request an engagement briefing