ORB QA + Completion Criteria (Internal)

Deliverables quality

  • Exec summary is 1–2 pages, non-technical, decision-focused
  • Risk register has: title, impact, likelihood, evidence, recommendation, effort
  • 30/60/90 plan is prioritized and has owner types
  • Restore verification is clearly documented (what we tested + result + time)
  • Maturity scorecard is simple and understandable

Consistency

  • No contradictions between risks and action plan
  • No “consultant fog” language (be concrete)
  • Claims are supported by evidence

Security hygiene

  • No secrets in deliverables
  • Evidence is sanitized where needed
  • Access is revoked at closeout

Client readiness

  • Readout meeting scheduled with decision-makers
  • Pre-read sent if appropriate
  • Next-step options presented cleanly