The words SAGEN uses, and what each one means. Where a term appears on a customer's screen, this is the wording to use out loud so that a meeting and the product agree.
Engagement. A scoped piece of service work with agreed deliverables, effort, and schedule.
Focused engagement. A short entry engagement that turns an open question into a decision package. Software Discovery Workshop, AI Opportunity and Security Assessment, or Secure Architecture Review.
Decision package. What a focused engagement produces. Findings, recommendations, risks, and a practical next step the customer owns.
Security by design. Settling security and regulatory requirements while a system is designed, rather than inspecting it afterward.
Readiness. Being prepared for a framework, an examination, or a request for proof. Not a certification.
SOC 2. An examination of a service organization's controls, performed by an independent licensed CPA firm. Produces a report.
ISO 27001. An international standard for an information security management system. Certified by an accredited body.
NIST. United States guidance used to assess risk and prioritize safeguards. Alignment, never certification.
Attestation. An independent opinion about controls. SAGEN prepares for it and never performs it.
SAGEN Cyber Readiness. SAGEN's product, and currently the only one.
Workspace. What a customer or their provider opens. The same workspace for both, scoped by authorization.
Evidence. An attributable record of something observed, documented, or declared, carrying what it is and how much it can be relied on.
Evidence Record. The normalized form evidence takes once it enters the governed record. Normalized once, reused by every view.
Evidence confidence. How much a figure can be relied on, expressed as a value with a band of high, medium, or low. Composed conceptually of source reliability, freshness, coverage, consistency, and integrity.
Freshness. How recently evidence was captured or confirmed. Reported alongside confidence, not folded into it.
Stale. Evidence that was true and is no longer current enough to rely on. Never described as clean or good.
Not assessed. No evidence exists for this item. Not a zero, and not a pass.
Posture score. The live measure of endpoint security state, with bands from strong through managed, at risk, and critical. Reported with its confidence.
Insufficient data. The state when there is not enough evidence to produce a score honestly. Deliberate restraint, not a bad result.
Last known. A previously calculated value retained for context. History, never current state.
Finding. A normalized security observation about a device, sourced from either an alert or a vulnerability.
Alert. A finding indicating something happened.
Vulnerability. A finding indicating something is exposed. Not evidence that anyone exploited it.
Reopened. A finding that returned after being closed. A different conversation from one that never went away.
Critical system. A business capability the organization depends on, declared by the customer and connected to the assets that support it.
Exposure. How exposed a business system is, in bands of pending, none, low, elevated, or severe. Pending is not none.
Priority. The product's recommendation of what to address first, always with the ranking basis stated.
Advisory explanation. AI-generated context for a finding. Grounded, versioned, and advisory. It explains and never decides.
Attack path. A described route an attacker could take. Hypothetical unless evidence says otherwise.
Verified fix. An exposure confirmed closed by new evidence. A completed task is not a verified fix.
Frozen package. Evidence approved for release, scoped to a purpose, time-bound, and preserved with its timestamp and remaining uncertainties.
Insured. The customer, in an insurance context. They own the evidence and approve every release.
Entitlement. How many devices a customer may enroll. Enforced when invitations are issued.
Invitation. A short-lived, single-use activation code for enrolling one device.
Support view. Audited, read-only delegated access used by SAGEN staff. Time limited, reason recorded, and visible to the customer.
Available. All SAGEN services and the product are available to close a deal today. Availability is not a deployment date.
Built, enabled, sold. Three different answers to "do you have X". A capability existing is not a capability available, and available is not sold.
Illustrative. Example material using fictional data. Never presented as a customer result.
Grade. A weighted-domain grading model exists in the product and is in calibration. The live customer-facing measure is the posture score. Do not present a grade as something a customer sees today.