The standard posture on confidentiality, conflicts, and engagement structure.

This document describes the firm's general posture on confidentiality, conflicts, and engagement structure. It supplements — but does not replace — the written engagement letter issued for any specific matter. The engagement letter controls.

An engagement with Deetz Consulting, LLC begins only upon the firm's countersignature of a written engagement letter. Prior to that signature:

• Inquiry calls, exchanges of email, and information shared during scoping are conducted under the firm's general professional discretion but do not yet constitute a formal engagement.
• The firm is not bound to accept the matter, and you are not bound to retain the firm.
• Information you provide is handled under this firm's Privacy Policy and the discretion described in this document.

Once the engagement letter is countersigned, the matter is governed by its specific terms — scope, fee, confidentiality, privilege structure, and any other provisions specific to the matter.

The firm's standard posture on confidentiality includes:

• No public client list. The firm does not name clients in marketing, on the website, in social media, or in third-party directories.
• No testimonials. The firm does not solicit or publish endorsements from clients. Where a client wishes to provide a private reference to a future prospect, it is offered privately and with their explicit, written authorization.
• No external commentary on specific matters. The firm does not speak publicly about specific engagements, including in interviews, articles, books, or social media. Generalized commentary on the security profession is permitted; specific reference to identifiable clients is not.
• Internal access controls. Substantive work on any engagement is conducted by Mr. Deetz personally. Where specialized technical capability is required, named specialists are disclosed in advance and brought in under written confidentiality.
• Secure handling. Engagement records, work product, and client communications are stored with appropriate technical safeguards. Document destruction is available on engagement-end where requested.

Where the matter is appropriate, the firm can be retained through your counsel so that communications and work product proceed under the attorney-client privilege and the attorney work-product doctrine. The structure is agreed in writing at engagement.

This is the standard structure for matters involving internal investigations, regulatory exposure, or litigation. Speak with your counsel about whether this structure is appropriate before retaining the firm directly.

Before accepting any engagement, the firm runs a conflicts check against current and recent matters. Where a conflict exists or could reasonably be perceived, the firm declines the engagement.

The firm does not represent both sides of a matter, in any sequence. Once retained on one side of a dispute, the firm will not later be retained on the opposing side, even if the original engagement has concluded.

All engagement terms are set out in writing in the engagement letter, including:

• Scope of work and specific deliverables.
• Fee structure — typically fixed-scope for assessments and program reviews, hourly for expert witness work, retainer for ongoing advisory.
• Timeline and milestone expectations.
• Travel, expenses, and out-of-pocket costs.
• Confidentiality and privilege terms specific to the matter.
• Termination rights.

Reports, written advisory, and other engagement deliverables produced for a client are owned by the client subject to the firm's retained right to its underlying methodology, expertise, and general professional knowledge.

The firm does not republish, market, or display client work product. The firm retains an archival copy as required by professional standards and applicable law; archival storage uses the same security posture as active engagement records.

Either party may terminate an engagement consistent with the terms of the engagement letter. Upon termination, the firm provides work product completed through the termination date, returns or destroys client materials as the engagement letter specifies, and observes continuing confidentiality obligations indefinitely.

This document describes the firm's standard posture. It is not a contract. It does not create any obligation between the firm and a reader. The firm's obligations arise only from executed engagement letters and from applicable law and professional licensing requirements.

Questions about engagement terms should be directed to David Deetz at info@deetzconsulting.com.