The Rescue
Inheriting a failed implementation from a Big 4 firm or legacy vendor and delivering a working system.
What We Inherit
You're 14 months into a $30M implementation. The original vendor deployed 200 consultants. You have a prototype that doesn't pass compliance review, a burn rate that keeps you awake, and a board asking hard questions. The vendor's response is a change order and another 6 months. You need someone who can inherit the wreckage and ship a working system.
The initial assessment establishes what was built, what can be operated safely, which assets are recoverable, and where material gaps exist across data, identity, audit events, infrastructure, delivery, and ownership. Findings determine whether remediation, partial replacement, or a parallel rebuild is the responsible path.
The failed vendor is usually still present. Sometimes still billing. The team that built the non-compliant prototype is often the team being asked to remediate it — a structural conflict of interest that produces slow remediation and perpetuates the sunk cost logic that kept the engagement going. Our process is to work alongside your existing team where it makes sense and replace the vendor's team where it doesn't. We are not interested in blame attribution. We are interested in production systems.
A vendor transition should be based on current evidence, remaining obligations, recoverable assets, delivery risk, and the cost of each available path. A bounded technical assessment can distinguish remediation from replacement before the organization commits to a transition.
Tier I (Surgical Strike), sometimes Tier II for larger inherited implementations.
Why This Keeps Happening
Failed implementations aren't accidents. They're the predictable output of a business model that optimizes for engagement duration over delivery speed. The vendor sold a 24-month transformation. The team deployed on your project is measured on utilization, not outcomes. Discovery extends because discovery is safe billable time. Architecture decisions are deferred because decisions create accountability. Phase gates exist to manage the vendor's risk of scope reduction, not your risk of failed delivery. By month twelve, the sunk cost is too high to switch, and the vendor knows it. By month eighteen, the change orders have doubled the original budget. By month twenty-four, you have a prototype that doesn't pass compliance review and a new 12-month remediation roadmap.
The compliance failure that makes most failed implementations unshippable is not a surprise to the delivery team. The engineers who built the prototype know that the audit logging is insufficient. They know the access controls are not granular enough. They built it anyway because no one with authority to slow the build had the compliance depth to identify the gap in real time. The compliance workstream that was supposed to catch these issues was a separate team that joined in month six, after the architecture was locked. Retrofitting compliance onto a locked architecture is more expensive than building it compliant from the start — and the vendor knew this before month one.
The procurement process that produced the failed engagement was designed to find the most credible proposal, not the most capable delivery team. The proposal was written by senior partners who assembled a reference list from across the firm's portfolio. The delivery team was assembled from whoever was available after the proposal won. This is not fraud — it is the structural gap between consulting firms' proposal capability and their delivery capability, operating exactly as designed. The reference implementations were real. The team that delivered them was not the team on your project.
Ready When You Are
Recognize this situation?
We've inherited this exact scenario. Here's how we approach it.
What the decision actually requires
A recovery buyer needs an evidence-based decision between salvage, containment, partial replacement, and restart. Source-code volume, sunk cost, and slideware are poor proxies for deployability.
Architecture and implementation
01. Secure access and establish a reproducible build before changing scope.
02. Trace critical workflows through code, data, infrastructure, identity, tests, and operations.
03. Create a risk-ranked recovery boundary with explicit acceptance criteria and asset ownership.
04. Stabilize delivery, prove one production path, then expand only where evidence supports it.
Failure modes to test
- Continuing development before the build and environments are reproducible
- Accepting inherited estimates without testing critical paths
- Replacing the vendor while retaining the same ambiguous ownership model
Buyer questions
What can usually be salvaged?
Source, schemas, infrastructure, tests, design artifacts, and vendor knowledge may all have value, but each needs technical and legal verification.
How do we prevent another rescue?
Use measurable acceptance criteria, owned architecture decisions, working increments, evidence-producing delivery controls, and a transition plan from the start.
How We Execute
Where This Applies
How We Structure the Work
Tier I (Surgical Strike), sometimes Tier II for larger inherited implementations.
Estimate Your Vendor Recovery Cost
Does your vendor have a current SOC 2 Type II report?
Has your vendor completed a penetration test in the last 12 months?
How dependent are you on vendor-proprietary systems?
Does your vendor have contractual SLAs with financial penalties?
Can you export all your data from the vendor within 24 hours?
Has your vendor tested their business continuity plan?
Has your vendor had a material security incident in the last 2 years?
Is this vendor responsible for >50% of your critical operations?
Failed Vendor Recovery Guide
How to assess inherited wreckage, triage a non-compliant system, and execute a mid-engagement vendor switch without losing the deadline.