In most cases, leaders already arrive with a fairly clear vision of the situation:
an objective to reach, a timeline in mind, and often an idea of the solution that could help them get there.
This vision is valuable.
It reflects an intuitive understanding of the organization and its challenges.
But in practice, a diagnostic almost always starts somewhere else.
It begins with attentive listening and very simple questions.
What already exists today?
What actually works?
What still relies on intentions or assumptions?
Then come other questions, just as important:
Who really makes the decisions?
Who validates what?
Where are the control points?
How does information actually circulate between teams?
In some cases, the objective is to understand roles, responsibilities and operational realities more than alignment with a specific framework.
In others, it means reviewing an entire system: security, regulatory compliance, operational organization.
Only once this reality is clearly understood do the tools become useful.
At SRA Consulting, we often use matrices or frameworks designed specifically for the mission:
maturity matrices, flow mappings, compliance grids, and analysis of control mechanisms.
These tools are not meant to produce tables.
They are meant to answer a much simpler question:
Is the system envisioned by the company actually capable of working under real conditions?
Something interesting usually happens at that point.
Most organizations already have many elements in place.
But the diagnostic helps reveal three essential things:
what already works,
what needs adjustment,
and above all what will need to be actively managed over time.
A useful diagnostic does not only measure a level of compliance.
It helps determine whether a system is truly ready to operate in the real world.