Gate. Docs and evidence under the client’s technical authority — not certified auditing, not engineering approval, not ASG holding NQA-1 program authority.
The opinion behind it
Fewer documents that people actually follow beat a complete set that nobody opens. One process, walked honestly, is worth more than a wallpaper of unused forms. The file is yours; the authority stays with you.
Same method as the rest of the firm: Understand → map → improve → evidence and a handoff.
- Walk itThe procedure as it runs, including the spreadsheet that is the real one.
- Name the breakThe workaround, who is accountable, what a reviewer would open first.
- Rewrite itSOP, work instruction, or a small pilot with a human gate.
- Hand it offEvidence under your authority. We write; you sign.
One process, drawn as a swimlane. The top row is the work as it actually runs — the spreadsheet, the workaround, the person who remembers. The middle row is what ASG writes: a diagnostic, a risk map, procedures or a small automation with a human gate, and an evidence pack. The bottom row is what you keep: the authority, the file, the signature. Nothing on this drawing is a certified audit or NQA-1 program authority.
Named outcomes4 things you keep
- A diagnostic of one process, written down
- Procedures and runbooks people will actually follow
- A quality evidence pack under your technical authority
- A small automation with a human gate and a trail
Named consultingin operational systems & quality
One-process operations diagnostics
One service flow, walked as it runs, with a written diagnostic.
Procedure and work-instruction consulting
Fewer documents people will actually follow, written against the work.
Quality evidence hygiene
Records a reviewer can quote, under your technical authority.
Workflow and reporting pilots
Small, human-reviewed automation. You keep the source.
Credentialing checklist design
The checklist a reviewer opens first. Paperwork literacy, not a certification we hold.
Named startersQuality starters — scope still agreed in writing — the scope sheet
IT service-flow diagnostic
One process
One service flow, mapped and diagnosed.
Procedure control reset
Fixed scope
The procedures people actually follow, rewritten against the work.
Quality evidence pack
Fixed scope
Records a reviewer can quote, under your technical authority.
Workflow automation pilot
Fixed scope
Small, human-reviewed. You keep the source.
What this covers6 areas, and where each one bites
- Process diagnosticsOne process, walked as it runs, including the spreadsheet that is the real procedure. A written answer at the end.
- Procedure controlSOPs and runbooks written against the work. Fewer documents people will follow beat a complete set nobody opens.
- Quality evidenceRecords a reviewer can quote, kept in a form your team maintains. Under your technical authority.
- Human-reviewed automationSmall pilots. Mechanical work moves to the machine; judgement stays with a person; the trail records who signed.
- Traceable reportingA number in a report is only useful if someone can say where it came from. Lineage written down.
- When we teamNQA-1 / Appendix B language and supplier documentation as perimeter writing — not certified auditor status, not ASG holding program authority.
Docs and evidence under the client’s technical authority. Nothing on this sheet is a certified audit, an accreditation, an engineering approval, or ASG holding NQA-1 program authority.
What holds this workstandards we know, not certifications we hold
- ISO 9001The general management system. Written against how the work runs, not against a purchased template.Management system
- NQA-1 / App BPerimeter language we write when we team, under your technical authority. Not a program ASG holds, not a certified audit.When we team
- CMMC Level 2Paperwork literacy: the plan, the map, the POA&M. Not a certification we hold.Defense paperwork
- Human sign-offNo machine output leaves as a commitment without a person approving it. This is a design rule, not a setting.Every automation
Where it stopsan empty row is work this firm does not take
How those outcomes get hired
You hire a walk of one process, the procedures people will follow, and evidence under your authority — not a certified audit and not a wallpaper of unused forms.
- Procedure controlYou keep: Document hierarchySOPs and runbooks written against how the work actually runs, not against a template.
- Process diagnosticsYou keep: A written reportOne process, walked as it runs, with a written diagnostic and a recommended order of work.
- Quality evidence packsYou keep: Quality manual and proceduresThe records a reviewer can quote, written under your technical authority.
- CMMC readiness paperworkYou keep: System security planCredentialing checklist, system security plan, and POA&M — written once, yours to maintain. Not a certification we hold.
- Workflow automationYou keep: The automated processThe spreadsheet-and-email process that eats a day a week, turned into something that runs itself.
- Traceable reportingYou keep: The pipelinePipelines and reporting where you can trace every number back to where it came from.
Capacity
One engineer, and the machines. The reading and the first draft of a document set are machine work; the judgement about what your team can actually sustain is not.
There is no bench. A programme larger than one person can carry properly is one I will tell you about before it starts.
Start a conversationStraight answer, no deck. What it takes to start.
One standard, more than one practicewhy these are three sheets and not three firms
- Section 508Section 508 — Accessible Public Systems: we write toSection 508 — Operational Systems & Quality: does not applySection 508 — Resilience & Technical Communication: we write to
- ADA Title IIADA Title II — Accessible Public Systems: we write toADA Title II — Operational Systems & Quality: does not applyADA Title II — Resilience & Technical Communication: does not apply
- WCAG 2.1 AAWCAG 2.1 AA — Accessible Public Systems: we write toWCAG 2.1 AA — Operational Systems & Quality: does not applyWCAG 2.1 AA — Resilience & Technical Communication: we write to
- ISO 9001ISO 9001 — Accessible Public Systems: does not applyISO 9001 — Operational Systems & Quality: we write toISO 9001 — Resilience & Technical Communication: does not apply
- NQA-1 / App BNQA-1 / App B — Accessible Public Systems: does not applyNQA-1 / App B — Operational Systems & Quality: we write toNQA-1 / App B — Resilience & Technical Communication: does not apply
- CMMC Level 2CMMC Level 2 — Accessible Public Systems: does not applyCMMC Level 2 — Operational Systems & Quality: we write toCMMC Level 2 — Resilience & Technical Communication: does not apply
- Human sign-offHuman sign-off — Accessible Public Systems: we write toHuman sign-off — Operational Systems & Quality: we write toHuman sign-off — Resilience & Technical Communication: we write to
Human sign-offThe line that crosses all three. Models may draft; a person decides and signs; the record says who. None of the others survive without it.