Start with whose information you hold

The most useful first message tells me what the organisation does, whose information it holds and why its board wants another perspective on technology or risk. Please include the committee you have in mind and the meeting calendar, because my twenty days a year are already shaped by Wynnorra's reporting cycle. If the organisation has had an incident, a sentence saying so is enough; please do not send investigation reports, tenant data or security assessments before a confidentiality arrangement is in place. I will need to discuss any approach with Wynnorra's chair and chief executive before agreeing to a second conversation. Questions about a Wynnorra tenancy, a repair or a contractor account should go to our customer service team, who can act on them properly. I do not take on paid consulting work and will not discuss our systems with vendors through this channel.