How we work
Start with the question. Define the boundaries. Then do the work.
OSINT can reveal a great deal. That makes judgement and scope just as important as research capability.
Every Principia Works engagement begins by establishing why the work is being done, what question needs answering and where the boundaries are.
Understand the objective.
The first conversation is about the problem.
- What happened?
- What concerns you?
- What are you trying to understand?
- What decision will the work support?
- Sometimes that leads to an Exposure Assessment.
- Sometimes the real need is training.
- Sometimes there is an investigative question for Principia Intelligence.
- Sometimes we are not the right service.
We will tell you that too.
Agree the scope.
Before research begins, the engagement is defined in writing.
That can include:
- The purpose of the work
- The people, organisations or assets in scope
- Relevant sources or methods
- Expected outputs
- Research boundaries
- Timeline
- Fee
- Required consent, authority or other conditions
No engagement should quietly expand beyond its agreed purpose.
If the question changes materially, the scope needs to change with it.
Research and analysis.
We work from lawful public or otherwise appropriately authorised sources relevant to the engagement.
The objective is not to collect the largest possible amount of information. It is to determine what matters.
- We compare sources.
- We connect related information.
- We verify significant findings where possible.
- We document relevant evidence.
Where something is an inference rather than a confirmed fact, we say so.
Where the available evidence is insufficient, we say that too.
Human review.
Technology can accelerate research.
It can search, organise, extract and correlate information far faster than a person working manually. That does not make it the analyst.
Significant findings are reviewed before they reach the client.
Human judgement remains responsible for interpretation, limitations and conclusions.
Reporting.
The result should make sense to the person who has to act on it.
Reports focus on:
- What we found
- Why it matters
- What supports the finding
- What can reasonably be concluded
- What remains uncertain
- What should happen next where recommendations are part of the engagement
Technical detail is included where it helps.
Jargon is not a substitute for explanation.
Confidentiality.
Some of the information we research may already be public. The analysis we create from it may not be.
Bringing scattered information together can create a much more sensitive picture than any single source contained.
We treat client instructions, findings, reports and investigative material accordingly.
We do not identify clients or publish client work without permission.
Our boundaries.
We do not:
- Ask for client passwords or one-time codes
- Break into accounts or systems
- Bypass access controls
- Install surveillance software
- Use stolen credentials
- Misrepresent assumptions as facts
- Research outside an agreed scope without authorisation
- Provide legal opinions
- Provide compliance certification
- Pretend a service fits when another specialist is better suited
If something is happening right now.
Principia Works is not an emergency incident-response service.
If you believe money is actively at risk, contact the relevant financial institution immediately.
If an organisation is experiencing an active technical compromise, contact its IT or incident-response provider.
Where criminal conduct may be involved, contact the appropriate authorities.
Once the immediate situation is contained, we may be able to help investigate the public-information or social-engineering component.
Start with the problem, not the service.
You do not need to know exactly what you need before contacting us.
Tell us what happened, what concerns you or what you are trying to understand.
We will tell you whether Principia Works is the right fit and what the next step would involve.