In depth

Process analysis

An assessment shows what happens. A process analysis shows why. DeepCalls maps where policy and practice diverge, and what you can change. As part of your voice phishing or account takeover assessment, or on its own based on your procedures.

  • With an assessment or on its own
  • Delivered in the report
  • Concrete recommendations

Why

From finding to cause

An assessment shows where a call went differently from what the procedure intends. If you only look at the outcome, it is tempting to reach for extra training or a stricter instruction.

The cause may also lie in the process itself. A process analysis makes it visible, so you improve where it has an effect.

On paper, a procedure often looks good. Only when you call do you see what happens in practice.

Lara Hemstede

founder DeepCalls

We test the process, not the people.

What we analyse

Verification, escalation and authorisation

Based on the assessment results, or without an assessment based on your procedures, DeepCalls analyses where the vulnerability lies structurally:

Verification.
How it is established who is calling.
Escalation.
What happens when a request is passed on.
Authorisation.
Who may approve or carry out which change.

The result

A concrete picture, and what you can change

You receive the process analysis as part of the report. Without test calls, DeepCalls reviews your procedures against our practical experience.

  • An overview of where policy and practice diverge

  • Recommendations you can act on straight away

  • Where the process alone is not enough, the analysis links to the overview of technical measures

Who it is for

For organisations that want to know why

  • Organisations that commission a voice phishing or account takeover assessment
  • CISOs who need to translate findings into policy and procedures
  • Organisations with an outsourced service desk, or with local IT alongside a central service desk
  • Organisations that fall under the Cyberbeveiligingswet (the Dutch Cybersecurity Act), where the board bears ultimate responsibility for cyber risk management
  • Organisations that first want their procedures reviewed, without test calls

Frequently asked questions

Can I purchase a process analysis on its own?
Yes. With an assessment, the process analysis is optional. Without an assessment, DeepCalls reviews your procedures against our practical experience.
What is the difference from the findings per call?
The findings describe what happened in each call. The process analysis shows where that comes from structurally. Both are included in the report.
Do you assess individual employees?
No. We test how processes hold up in practice, not people.
What do we do with the outcome?
You adjust procedures based on the recommendations. Where a technical measure is needed, the overview of technical measures helps you choose.

Introductory call

Do you want to know why it happens?

In an introductory call, we discuss your situation and whether a process analysis is a good fit.

Book an intro call