Let's start with a risk assessment which does not take as much time as you think. When done well the data can be a catalyst to risk analysis.
The risk analysis will give you a narrative and a way of understanding your particular situation as a result of a businesse's set of values and often point of view.
The first step is a meeting to complete a business risk assessment. Your time is valuable and so is ours. The travel and meetings are on us until we agree on a project work.