Do
- Acknowledge Compliance Management depth – Policy / Privacy / Incident.
- Frame on GRC-workflow vs signal-led-architecture engineering problem.
- Use NIS2 effectiveness evidence as the audience-calibration wedge.
- Plan replacement at the SAT renewal – GRC contract can stay.
- Surface KnowBe4-displacement testimonials as service-not-architecture.
Don't
- Don't attack Compliance Management – the GRC workflow is real.
- Don't compete on 44+ language count.
- Don't dismiss Keensight PE backing or Junglemap acquisition.
- Don't promise permanent co-existence – we replace SAT at renewal.
- Don't engage Junglemap-bundle expansion conversations.
MetaCompliance audits programmes.
Moxso reduces risk.
Say it. Then stop talking.