Illustrative model with assumed reduction ranges, not measured outcomes or an assessment. Your contracts, CUI flows, and security dependencies determine the boundary; discovery validates it.
Why the boundary is the biggest lever you have
Scope is multiplicative: every requirement applies to everything inside the boundary. Cut the boundary and you cut remediation, licensing, evidence, and assessment cost all at once — before spending a dollar on tooling. The full method is in the CUI Scope Reduction Field Guide, and the cost math lives in the Cost Planning Guide.
Email me this estimate + the discovery roadmap.
We'll send your estimate, the field guide, and a short series of practical scope-reduction emails — unsubscribe anytime. Or email rj@indirectit.com directly.