Enterprise Security Readiness Pack
Prepare an early-stage vendor for an enterprise security review by documenting real controls, exposing unknowns and gaps, and creating a transparent, lower-risk scoped-pilot or security-exception path. Use when a startup lacks SOC 2 or a mature security program and needs security-review materials, a questionnaire answer bank, data-flow analysis, least-privilege review, remediation plan, or engineer-to-engineer security meeting agenda.
Sample result
Run live demo
Build enterprise security readiness pack| Security Requirement | Current Control Fact | Status | Scoped Pilot Risk Mitigation | |
|---|---|---|---|---|
| 1 | SOC 2 Type II Certification | No formal SOC 2 audit completed to date | Not currently supported | Restrict access to de-identified shift data; sign custom DPA with audit rights |
| 2 | SSO / SAML 2.0 Integration | Okta and Azure AD SAML supported in production | Implemented and evidenced | Enforce mandatory SSO for all Dryft regional managers during 90-day pilot |
| 3 | Data Encryption at Rest | AWS RDS AES-256 encryption enabled | Implemented and evidenced | Maintain KMS customer-managed key isolation for Dryft operational data |
| 4 | Least-Privilege API Scope | Write access to shift schedules requested by sales | Requires engineering work | Limit integration scope to read-only roster synchronization for pilot duration |
Example run
“We are preparing for the security review with Dryft Partners and their VP of IT Security, Saoirse Petrov. Since CrewLayer doesn't have a SOC 2 certification yet, can you audit our technical controls, map out our gaps, and build a scoped pilot proposal to present to Saoirse?”
Retrieved 500-location hospitality staffing opportunity ($140,000 ARR). Contact: Saoirse Petrov (VP of IT Security). Flagged requirements: SOC 2 Type II compliance and scope access.
Confirmed AWS RDS AES-256 encryption at rest, active SAML 2.0 (Okta/Azure AD) support, uncertified SOC 2 status, and unisolated schedule write API access.
Posted risk alert for Dryft Partners deal ($140,000 ARR) detailing the uncertified vendor status and proposing a 90-day read-only pilot strategy.
Dryft Partners Security Gap Assessment & Pilot Scope
More in Deal Acceleration
- Sample resultMEDDICC deal scorecard
Component Score Status Metrics 2/3 Amber Economic Buyer 1/3 Red Decision Criteria 3/3 Green Identified Pain 3/3 Green Champion 2/3 Amber Competition 1/3 Red Analyze sales opportunities, call transcripts, and pipeline qualification using MEDDICC. Use when asked for a deal review, deal health or qualification check, MEDDICC scorecard, call coaching, pre-call qualification prep, champion-gap review, or pipeline risk scan. Supports connected CRM and conversation-intelligence data, uploaded exports, and pasted transcripts.
- Sample resultDiagnose why a deal stalled
Diagnostic Criterion Score (1-5) Evidence & Unanswered Gaps 1. Solution Mapped to Environment 2 Rep presented standard sensor specs; no validation of Indigo's reefer trailer relay protocols. 2. Early Technical Constraints Defined 1 Devi Ibrahim raised BLE gateway range concerns; technical response was delayed by six weeks. 3. Operational Success Criteria Set 2 Success defined vaguely as 'fewer excursions' without agreed baseline counts or cost metrics. 4. Buyer Articulate on Solution 1 In transcript, IT Director Samuel Thorne expressed confusion on how gateway hardware integrates with legacy telematics. 5. Key Stakeholder Alignment 2 Devi Ibrahim engaged, but QA Director Elena Rostova and IT Director Samuel Thorne were missing from decision calls. 6. Clear Implementation Roadmap 1 Proposal included commercial terms without a co-owned 60-day deployment schedule or QA sign-off milestone. Use when a seller asks why one deal stalled, slipped, ended in no decision, or was lost; wants a closed-won or closed-lost review; or needs to diagnose buyer confidence, discovery gaps, and the next recovery move. Produce an evidence-backed, read-only review of one B2B deal. Not for generic forecast reviews or pipeline cleanup.
- Sample resultBuild an industry proof matrix
Customer Vertical Segment Quantified Outcome Apex Pet Health Emergency & Specialty 35% faster lab sync, $140k saved/yr Suburban Vet Partners Multi-Clinic Group 60% reduction in billing errors Coastal Equine Care Equine & Livestock 45 min saved per vet daily on mobile EHR Top 5 Specialty Vet Network Specialty Oncology 22 min drop in patient intake latency Build an industry-wise case study repository and proof matrix from case studies, decks, won-customer lists, CRM exports, or a website, then pull cleared, vertical-matched proof for outreach. Extract industry, customer clearance, quantified outcomes, quotes, and displaced incumbents; anonymize private customers and mark missing evidence as "to confirm". Trigger when the user wants to create a case study repository, organize proof by industry, build a customer-reference or logo matrix, find industry-matched case studies, or use the right customer story in outreach. For writing the email around the proof, use the Cold Email Writing skill.
