Statement of Work

Narrative Consulting LLC will perform an Identity Infrastructure Assessment for Client. This engagement provides a comprehensive evaluation of Client's current identity governance posture, identifying gaps, risks, and opportunities across the identity stack. The engagement produces a prioritized remediation roadmap that enables Client to make informed investment decisions about their identity infrastructure.

• Full inventory of identity stack — IDP, HRIS, SaaS applications, service accounts, API keys
• User lifecycle mapping — how access is granted, changed, and revoked today (and where it breaks)
• RBAC/ABAC maturity assessment — are roles defined? documented? enforced? or just names in Okta?
• Privileged access audit — who has admin/root/elevated access, is it justified and time-bound?
• Integration gap analysis — which systems talk to each other and which are manual/orphaned
• Risk-ranked findings with remediation roadmap — prioritized by audit impact

Identity Infrastructure Report — branded PDF including:

• Executive summary
• Architecture diagrams (current state)
• Gap findings with risk ratings
• Prioritized buildout plan / remediation roadmap

This engagement is expected to be completed within 1-2 weeks from the date of kickoff. Kickoff will be scheduled within 48 hours of SOW execution and deposit receipt.

• Client provides admin-level (or read-only admin) access to identity systems (IDP, HRIS, SSO admin consoles) within 48 hours of kickoff.
• Key personnel are available for interviews — estimated 2-3 hours total across IT, Security, and HR stakeholders.
• Scope covers up to 50 SaaS applications. Additional applications beyond 50 are billed at $50/app.
• Client designates a single point of contact for scheduling and access provisioning.

• Custom software development
• Non-identity compliance domains (e.g., financial controls, physical security)
• HRIS or IDP licensing costs
• Implementation of recommendations (see Identity Governance Buildout engagement)
• Penetration testing or vulnerability scanning

Payment schedule:

• 50% ($1,750.00) due upon execution of this Statement of Work
• 50% ($1,750.00) due upon delivery of the Identity Infrastructure Report

Payment accepted via ACH transfer or credit card. All invoices are net-15.

Any changes to the scope, timeline, or cost of this engagement require a written change order signed by both parties before additional work proceeds. No surprise invoices — ever.

This engagement begins on and is expected to complete within of the kickoff date. If Consultant anticipates a delay, Client will be notified in writing with a revised timeline.

By signing below, both parties agree to the terms and conditions set forth in this Statement of Work. This SOW is governed by the terms of the Master Services Agreement between the parties, if one exists. In the absence of an MSA, the terms of this SOW shall govern.