Eighteen artifacts a mid-market company never gets from its VAR: risk assessment, policy framework, operating model, priority rubric, ROI wins register, systems inventory, access matrix, onboarding and offboarding checklists, software evaluation scorecard, shadow spreadsheet map, security questionnaire, business continuity baseline, training tracker, KPI scorecard and VAR evaluation scorecard.