McPhail Security | Partner-Craft POV | Internal Reference
Instructions, standards, and ready-to-use cover sheets for all client-facing engagement deliverables.
Every document that leaves the partner’s hands and goes to a client carries a cover sheet from this system. The cover sheet applies the partner’s brand, classification marking, and engagement context. McPhail Security branding does not appear anywhere on client-facing documents.
| Page | Cover Sheet Type | Classification | Archetype |
|---|---|---|---|
| 3 | Standard Confidential | Confidential | A1 — Classic Enterprise Cyber |
| 4 | Operationally Sensitive | Confidential / Operationally Sensitive | A2 — Industrial / OT / IIoT |
| 5 | Regulatory Sensitive | Confidential / Regulatory Sensitive | A3 — Emerging / Sensitive AI |
| 6 | Cryptographic Infrastructure Sensitive | Confidential / Cryptographic Infrastructure Sensitive | A4 — PKI / PQC / Crypto Lifecycle |
| 7 | Standard Confidential | Confidential | A5 — Remediation / Hygiene at Scale |
| 8 | Security Operations Sensitive | Confidential / Security Operations Sensitive | A6 — SOC Modernization / Agentic D&R |
Apply these standards to every client-facing document in every engagement
| Field | Description |
|---|---|
| Partner Logo | Top left. Partner provides the logo file. High-resolution PNG or SVG preferred. Do not use vendor logo on client-facing documents |
| Document Title | Centered, large, clean typeface. The exact title of the deliverable as it appears in the engagement report materials list |
| Prepared For | Client organization name. Not an individual contact name unless specifically requested |
| Prepared By | Partner organization name. Not McPhail Security. Not the vendor name |
| Date | Month and year only. Not day-specific. Example: June 2026 |
| Version | v1.0 for first share. v1.1 for first revision. Increment minor version for edits, major for structural changes |
| Classification | Use the archetype-specific classification from the cover sheet for the relevant engagement type |
| Partner Contact | Partner primary contact name and direct email address |
Every page of every client-facing document carries three elements separated by a divider line:
| Left aligned | Centered | Right aligned |
|---|---|---|
| [Partner name] | [Document title] | v[X.X] — [Month Year] |
Classification marking runs centered below the divider, full footer width. Use the archetype-specific marking.
| Marking | Applied To | Shared With |
|---|---|---|
| McPhail Security / Internal Use | Session Facilitation Guide | MM only — never shared |
| McPhail Security / Partner Restricted | Gap Analysis Tracker, Engagement Retrospective section | Partner lead only — not shared with vendor unless partner explicitly agrees |
| [Partner name] / Client Confidential | All client-facing deliverables with this cover sheet applied | Named client recipients only |
The following statement appears on the inside cover of every client-facing deliverable, directly below the cover sheet:
“The methodology and materials contained in this document were developed in collaboration between [Partner name] and McPhail Security. All client-facing content is the property of [Partner name] for use within this engagement.”
This is a clarity statement, not a legal instrument. Formal IP arrangements are governed by the engagement agreement.
Each cover sheet below is ready to use. Replace all bracket placeholders before distributing. Apply the partner logo at top left.
Archetype Cover Sheet | Client-Facing Deliverable | 1 of 6
[Partner logo]
Replace this placeholder with the partner’s logo file before distributing
[DOCUMENT TITLE]
Replace with the exact document title as listed in the engagement report materials table
| PREPARED FOR | PREPARED BY |
|---|---|
| [Client organization name] | [Partner organization name] |
| DATE | VERSION |
|---|---|
| [Month Year] | v1.0 |
| CLASSIFICATION | CONTACT |
|---|---|
| Confidential | [Partner contact name and email] |
A1 — Classic Enterprise Cyber
This document contains proprietary methodology and client-specific findings developed as part of a structured security advisory engagement. Distribution is restricted to named recipients only.
“The methodology and materials contained in this document were developed in collaboration between [Partner name] and McPhail Security. All client-facing content is the property of [Partner name] for use within this engagement.”
Archetype Cover Sheet | Client-Facing Deliverable | 2 of 6
[Partner logo]
[DOCUMENT TITLE]
| PREPARED FOR | PREPARED BY |
|---|---|
| [Client organization name] | [Partner organization name] |
| DATE | VERSION |
|---|---|
| [Month Year] | v1.0 |
| CLASSIFICATION | CONTACT |
|---|---|
| Confidential — Operationally Sensitive | [Partner contact name and email] |
A2 — Industrial / OT / IIoT
This document contains operational security findings and methodology developed for environments where IT and operational technology intersect. Content describes production-critical systems and is restricted to named recipients only.
“The methodology and materials contained in this document were developed in collaboration between [Partner name] and McPhail Security. All client-facing content is the property of [Partner name] for use within this engagement.”
Archetype Cover Sheet | Client-Facing Deliverable | 3 of 6
[Partner logo]
[DOCUMENT TITLE]
| PREPARED FOR | PREPARED BY |
|---|---|
| [Client organization name] | [Partner organization name] |
| DATE | VERSION |
|---|---|
| [Month Year] | v1.0 |
| CLASSIFICATION | CONTACT |
|---|---|
| Confidential — Regulatory Sensitive | [Partner contact name and email] |
A3 — Emerging / Sensitive AI
This document contains findings and methodology related to AI governance and data handling practices. It has been prepared with reference to applicable data protection and regulatory requirements. Distribution is restricted to named recipients only.
“The methodology and materials contained in this document were developed in collaboration between [Partner name] and McPhail Security. All client-facing content is the property of [Partner name] for use within this engagement.”
Archetype Cover Sheet | Client-Facing Deliverable | 4 of 6
[Partner logo]
[DOCUMENT TITLE]
| PREPARED FOR | PREPARED BY |
|---|---|
| [Client organization name] | [Partner organization name] |
| DATE | VERSION |
|---|---|
| [Month Year] | v1.0 |
| CLASSIFICATION | CONTACT |
|---|---|
| Confidential — Cryptographic Infrastructure Sensitive | [Partner contact name and email] |
A4 — PKI / PQC / Crypto Lifecycle
This document contains findings related to cryptographic infrastructure and post-quantum readiness. Content is technically sensitive and restricted to named recipients with relevant authority and responsibility.
“The methodology and materials contained in this document were developed in collaboration between [Partner name] and McPhail Security. All client-facing content is the property of [Partner name] for use within this engagement.”
Archetype Cover Sheet | Client-Facing Deliverable | 5 of 6
[Partner logo]
[DOCUMENT TITLE]
| PREPARED FOR | PREPARED BY |
|---|---|
| [Client organization name] | [Partner organization name] |
| DATE | VERSION |
|---|---|
| [Month Year] | v1.0 |
| CLASSIFICATION | CONTACT |
|---|---|
| Confidential | [Partner contact name and email] |
A5 — Remediation / Hygiene at Scale
This document contains findings related to vulnerability posture and remediation methodology. Specific findings are operationally sensitive and restricted to named recipients only.
“The methodology and materials contained in this document were developed in collaboration between [Partner name] and McPhail Security. All client-facing content is the property of [Partner name] for use within this engagement.”
Archetype Cover Sheet | Client-Facing Deliverable | 6 of 6
[Partner logo]
[DOCUMENT TITLE]
| PREPARED FOR | PREPARED BY |
|---|---|
| [Client organization name] | [Partner organization name] |
| DATE | VERSION |
|---|---|
| [Month Year] | v1.0 |
| CLASSIFICATION | CONTACT |
|---|---|
| Confidential — Security Operations Sensitive | [Partner contact name and email] |
A6 — SOC Modernization / Agentic D&R
This document contains findings related to security operations capability and detection and response methodology. Content describes current-state gaps and transition planning and is restricted to named recipients with security operations authority.
“The methodology and materials contained in this document were developed in collaboration between [Partner name] and McPhail Security. All client-facing content is the property of [Partner name] for use within this engagement.”