01
Web-first information
This page is the current public explanation. The PDF is an optional secondary download.
Included in Guardian Core
Turn findings and obligations into accountable action.
Guardian connects security findings, managed risks and required outcomes to owners, due dates, workflow states and review.
Package position
Included in Guardian Core
The Risk Register and All Actions work queue are part of Guardian Core. Additional assessment or managed-service modules can contribute governed findings and actions into the same workflow.
02
Clear commercial boundary
Included capability, allowances and separately priced activity are identified before activation.
03
Governed delivery
Exact scope, configuration and service commitments are confirmed in the applicable package schedule or proposal.
What is included
Capability designed around accountable security outcomes.
RR
Governed risk register
Record risk context, desired outcomes, treatment and accountable ownership.
AA
All Actions
One prioritised work queue across supported Guardian sources.
OW
Owners and due dates
Make responsibility and timing visible to the people completing the work.
WF
Workflow states
Track open, in-progress, review and completed work using controlled lifecycle states.
EV
Evidence and history
Retain traceable records supporting validation and reporting.
RO
Review of outcomes
Closure can be reviewed rather than accepted solely because a source stopped reporting a finding.
Important boundaries
Risk aggregation follows approved policy.
Guardian does not automatically combine unrelated findings into a single risk without an approved aggregation and closure policy.
The presence of a finding or action does not by itself represent a legal, compliance or certification determination.
See Guardian in context
Map the capability to your organisation.
We will confirm the relevant package, included allowances, additional modules and any separately scoped Damocles services.