What the two sessions are
Half an hour to interview your team, and half an hour to deliver. The first finds out what is actually running — which agents, on what accounts, with which credentials, and what anybody believes they are for. The second walks through what came back.
Between them, the work. The mandate is built from the interview rather than from a form, the delta is recomputed against it, and a security professional reviews and signs off what is delivered. {{claim:abp-sessions-by-a-person}}
Two sessions is what is sold. More is a separate conversation, and saying so before you buy is cheaper than discovering it afterwards.