Leave with a specific referral request and an optional introduction message.
Start with a real buying situation
For the worked example, the audience is an IT manager preparing a supplier review. Their problem is that the team has a long list of findings with no agreed business priority. The desired practical outcome is an owned remediation plan linked to specific systems and risks.
The example is deliberately bounded: testing needs written scope, permission and an agreed change window. That condition should influence the promise, scope and next step rather than disappear from the marketing copy.
| Illustrative offer | a scoped security assessment and remediation workshop |
|---|---|
| Buyer question | Which systems are in scope, and which business process depends on each one? |
| Possible evidence | a redacted example of evidence, severity rationale and remediation verification |
| Useful asset | a supplier security review preparation checklist |
How to complete your referral request
- Confirm that the customer has had a useful experience.
- Describe the kind of person and problem you can help with.
- Ask whether an introduction would be appropriate.
- Provide a short optional message they can edit.
- Respect a decline and keep any incentive explicit.
Worked example
These entries are illustrative planning material, not research findings or customer results. Keep the structure and replace the content with verified details.
| Why an introduction may be appropriate | Ask after the customer confirms the work was useful. Do not assume satisfaction from payment alone. |
|---|---|
| Who we can help | an IT manager preparing a supplier review facing the following problem: the team has a long list of findings with no agreed business priority. |
| The low-pressure request | If someone in your network is dealing with this issue, would an introduction be appropriate? No problem if nobody comes to mind. |
| Optional introduction text | Optional introduction: “I thought you might find this relevant. They offer a scoped security assessment and remediation workshop. You can decide whether a conversation would be useful.” |
| Follow-up and consent | Let the customer choose whether to introduce you. Do not request a contact list or enrol a referred person into a sequence without an appropriate basis. |
Review before using it
A useful operational measure in this example is the number of agreed priority findings with owners and verification dates. That does not automatically make it a marketing attribution metric. Define the source, period and owner before drawing conclusions.
- Can the customer decline comfortably and understand exactly who would be contacted?
- Check the delivery assumptions: Document permitted testing, data handling, exclusions and reporting recipients.
- Use evidence rather than promises. Never offer testing without authorisation or promise complete protection.
- Discuss the draft with someone who understands the buying situation. Start with: “Which systems are in scope, and which business process depends on each one?”
- If the next step is a trial, define its purpose. One possible starting point is to assess one explicitly authorised system and review the reporting format.
Common mistakes and a better review
Do not fill a missing fact with an impressive-sounding number. Mark it as an assumption, explain how you will check it and give that check an owner. A short, honest document is easier to use than an elaborate plan built on unknowns.
| Watch for | Asking for access to a customer’s entire contact list creates friction and privacy concerns. |
|---|---|
| A real buyer concern | Can you guarantee we will not be breached? |
| Useful response direction | No assessment can remove every risk. We can agree what we will examine, the evidence we will deliver and how remediation will be checked. |
| Evidence to collect | The buyer’s own account, a redacted example of evidence, severity rationale and remediation verification, and records relevant to the number of agreed priority findings with owners and verification dates. |
Your working sheet
Write your own version below. Notes are saved on this browser when local storage is available. Use Download to keep a separate copy; avoid adding confidential information on a shared device.
Example: Ask after the customer confirms the work was useful. Do not assume satisfaction from payment alone.
Example: an IT manager preparing a supplier review facing the following problem: the team has a long list of findings with no agreed business priority.
Example: If someone in your network is dealing with this issue, would an introduction be appropriate? No problem if nobody comes to mind.
Example: Optional introduction: “I thought you might find this relevant. They offer a scoped security assessment and remediation workshop. You can decide whether a conversation would be useful.”
Example: Let the customer choose whether to introduce you. Do not request a contact list or enrol a referred person into a sequence without an appropriate basis.
Review your work
Tick only what you can support with your answer or practice. This is a reflection checklist, not an automated assessment.
Questions about this resource
How do I adapt this for my cybersecurity services business?
Replace the audience, offer and evidence with your actual information. Begin with a recent buyer conversation about why the team has a long list of findings with no agreed business priority, then check which assumptions match your business.
Is the filled example ready to publish?
No. It is a working example. Verify claims, permissions, prices, current capabilities and any customer information before using it externally. Never offer testing without authorisation or promise complete protection.
What should I do after completing the worksheet?
Use it to make one decision or have one focused conversation. The intended output is a specific referral request and an optional introduction message. Set a review date and update it when the evidence changes.
Illustrative business worksheet. No customer results, market rates, traffic volumes or performance benchmarks are implied. About these resources.