Internal authority changes. External identity surfaces do not.
The Wallingford GroupWhat EISO Is:External Identity‑Surface Oversight (EISO) is a governance discipline for documenting the public‑facing identity surfaces that influence money, authority, and reputation during control transitions.
It is not monitoring. It is not cybersecurity. It is not forensics.
It is a recurring, dated, evidence‑linked governance artifact.Why It MattersIn normal times, EISO is a governance infrastructure. In a dispute, claim, review, or challenge, it becomes evidence.
Internal authority changes. External identity surfaces do not.
Domains, DNS, vendor channels, registry filings, and contact routes often remain misaligned long after a fiduciary or operator is appointed. When the economy tightens, small control failures get expensive.The SEC's 2026 examination priorities explicitly name control environment assessment as a focus for registered investment advisers and fiduciaries. Courts are increasingly asking who was watching the external surfaces — and finding no one was.
EISO provides a neutral, outside‑in record of what the world saw — and when.What We DeliverWe conduct recurring external reviews of the public‑facing identity surfaces your clients, counterparties, and regulators rely on. Each cycle produces a dated, evidence‑linked record of what was reviewed, what changed, what drifted, and what was flagged.
Findings are delivered as evidence‑linked signals for leadership review. Signals, not determinations.No dashboards. No portals. No operational disruption. No vendor contact. No accusations. No enforcement.The Wallingford Method
Leadership receives three recurring artifacts.Appointment Day Snapshot
A concise, dated record of what the outside world displayed at the moment of appointment. Suitable for leadership or board review.Flag Ledger
Evidence‑linked flags prioritized by materiality, with dated screenshots and change documentation.Monthly Oversight Report
A lightweight summary of drift, alignment, and material changes - showing whether a finding was noted, deferred, escalated, or resolved.The deliverable is a governance artifact. It shows that your firm had a disciplined outside‑in oversight process - and documents exactly what that process found.What We Review
In high‑trust environments, a single drifted identity surface - a changed wire instruction, a lookalike domain, a stale registry profile - can introduce exposure during the moments when counterparties are moving quickly and verification is hardest.We review the public‑facing identity surfaces your stakeholders rely on, including:
Domains and DNS integrity
Lookalike and confusingly similar registrations
Email authentication records (SPF / DKIM / DMARC)
Regulatory and licensing registry profiles
Directory and association listings
Referral partner and third‑party profile pages
Identity consistency across public surfacesIf drift is detected, it is surfaced with an evidence‑linked flag and a verification prompt for leadership review. Signals, not determinations.Scope Boundary
We surface signals and document changes. We do not determine intent or wrongdoing.
We do not contact vendors, clients, counterparties, or third parties.
The client retains all decisions and implementation responsibility.
Outputs are leadership artifacts for internal review - signals, not conclusions.Engagement Model
Designed for fiduciaries, trustees, operators, and leadership teams who need institutional‑grade external identity governance -without institutional bureaucracy.
The firms that come through difficult periods cleanly are the ones that can show they were paying attention before anything happened.EISO produces an outside‑in identity record that leadership can rely on when counterparties, boards, regulators, carriers, or counsel need to see what the external environment looked like at a given time.
Engagements are limited to a small number of private networks annually.Who We Serve
Court‑appointed receivers and special masters · Subchapter V and Chapter 11 trustees · Successor trustees and estate administrators · 1031 Exchange Qualified Intermediaries · Independent trust companies and family offices · Fee‑only RIAs and wealth advisors · Fiduciary attorneys and restructuring counselThe Wallingford Group
Signals, not determinations. Evidence of Discipline.
Institutional Governance led by former Enterprise Architects for The National Archives, Disney/ABC and PCI Compliance for Major League Sports.