PROGRAM-BUILD DOMAINS

The five domains that thread all five phases.

These domains are screened in ORIENT, designed in ORGANIZE, implemented in REMEDIATE, rehearsed in ASSESS, and sustained in HOLD. Each is separately scoped, with its own acceptance gate and handoff; no base phase silently absorbs domain work.

01 · OORIENTScope and baseline 02 · OORGANIZEPlan and architect 03 · RREMEDIATEImplement and document 04 · AASSESSValidate and rehearse 05 · HHOLDSustain and monitor

HOW A DOMAIN MOVES

Same five phases. Different depth at each gate.

ORIENT

Scope and baseline

Screened — the domain is assessed at posture and trigger depth only.

ORGANIZE

Plan and architect

Designed — architecture, registers, procedures, and owners.

REMEDIATE

Implement and document

Implemented — controls built and evidence collected.

ASSESS

Validate and rehearse

Rehearsed — sampled, spot-checked, and walked.

HOLD

Sustain and monitor

Sustained — on a recurring cadence with change control.

THE DOMAINS

Five domains, five standing boundaries.

Export control

DOMAIN PAGE →

ITAR and EAR exposure screening; registration decision support; jurisdiction and classification support; a technology and access-control plan; foreign-national (deemed export) controls; restricted-party screening; marking, recordkeeping, training, and audits.

STANDING BOUNDARY — No legal opinion and no license work. Registration and jurisdiction filings remain client- and counsel-executed. There is no "ITAR certification," and we never market one.

Document control

DOMAIN PAGE →

CUI identification and marking scheme; registers, versioning, distribution, and transmittal; storage boundaries; decontrol and disposition; records retention.

STANDING BOUNDARY — Marking is not safeguarding. No client CUI is stored in LFC systems by default.

Access control

DOMAIN PAGE →

Account lifecycle and least privilege; separation of duties; multi-factor authentication; remote and session controls; physical and visitor controls for CUI areas; foreign-national gating.

STANDING BOUNDARY — Implemented and evidenced only. No claim without an operating control behind it.

Program setup

DOMAIN PAGE →

Governance charter and roles; SSP and POA&M structure; policy framework; training program; incident-response plan; operating cadence and budget.

STANDING BOUNDARY — No compliance-by-subscription. No assessment or certification outcome is promised.

Execution evaluation

DOMAIN PAGE →

A need-to-closeout evaluation of procurement, contract, and subcontract execution: the processes and procedures that make execution systematic once work is awarded; flow-down handling; documented execution gaps; and commercial-operations streamlining with step-wise revenue estimates.

STANDING BOUNDARY — Diagnostic and design work only. No legal advice on contract terms, no financial audit, and no guaranteed revenue, margin, or award outcome. Revenue effects are documented as step-wise planning estimates tied to specific fixes — not as promised results.

THE DOMAIN SCOPING RULE

SMBs should not buy program depth the next pursuit does not require.

SCOPING RULE

Domains are scoped only when the route, the target contract, or an evidence gap justifies the spend. Each domain gets its own scope, price, and acceptance gate, and its own handoff back into the phase sequence.

EXECUTION EVALUATION

Execution evaluation pairs the federal lens with a commercial one. Federal: contract and flow-down compliance, award-to-execution discipline, and closeout that protects past performance and payment. Commercial: streamlined operations that lift revenue performance step by step: shorter need-to-award cycles, less rework and write-off, faster closeout and cash conversion, and capacity for more concurrent work.

FIVE DOMAINS · SEPARATELY SCOPED · EACH WITH ITS OWN ACCEPTANCE GATE

SCOPE THE DOMAIN

Tell us the contract. We will tell you which domains it needs.

Every engagement begins with ORIENT: a scoped, evidence-backed baseline and a prioritized route with a timeline and a budget. We price to the work, so the number follows the scope conversation.

A 30-minute introductory call. Bring the target solicitation and what you already know about your gaps.

SCHEDULE A 30-MINUTE CALL GET THE BRIEF

VOSB + SDVOSB CERTIFIED (SBA VETCERT) · UEI VU2HV8458J93 · CAGE 21BA0