KPMG
CSM Training Series — Session 1 of 4

Discovery: asking the right questions

How to run a client meeting that builds real account knowledge — and surfaces the opportunities nobody asked for.

35 min — The method
20 min — Live exercise
KPMG
Why we are here

You cannot sell what you don't know they have

KPMG
The series

Four sessions, one skill

SessionTopic
1 — todayThe discovery method: the 5 phases of a client meeting + live demo
2Role plays: you run the discovery
3Cybersecurity crash course 1/2: the building blocks
4Cybersecurity crash course 2/2: the market and our services
KPMG
The framework

The 5 phases of every great meeting

1
Relationship & introConnect as humans, set the purpose
2
Business discoveryUnderstand their organization, today
3
Technical discoveryMap their environment, today
4
OpportunityExplore and qualify what could come next
5
ClosingTie value to their words, book the follow-up
KPMG
Phase 1

01Relationship building & intro

Genuine human connection first, then a one-line purpose for the meeting. Signs of a great relationship: they respond fast, their time is easy to get, they ask about you, you know their family and hobbies.

KPMG
The golden distinction

Six types of questions — two that matter today

RelationshipBusiness discoveryTechnical discoveryOpportunityClosingScoping
Discovery = current state

“What does it look like today?”

“Tell me about your role” · “What do you use for endpoint protection?”

About them.

Opportunity = future

Goals, plans, why, qualifying.

“Have you considered an MDR service?” · “What are your cloud plans?”

About us and selling.

KPMG
Phase 2

02Business discovery

Understand: their organization, priorities, role and team, employees, locations, competitors, recent acquisitions, budget context.

Example questions

“Give me an overview of your organization…”
“What are the business priorities this year?”
“Tell me about your role… your team…”
“How many employees? How many locations?”
“Who do you consider your main competitor?”

Tips

Research before the meeting (website, news, our own files) — then confirm instead of asking: it shows you did your homework.

Prepare a short question list before every meeting.

With a business contact, this phase is the heart of the meeting.

KPMG
Phase 3

03Technical discovery — broad, then 3 deep

Goal: a high-level inventory of their environment. Awareness, not a deep dive. Two classic faults: sales people skip this phase (especially in follow-ups); technical people go too deep, too soon.

Can you give me an overview of how IT security is handled today?
We're a team of three. Defender on the servers, Carbon Black on laptops… honestly the alerts pile up.
You mentioned the alerts pile up — who watches them today?
Nobody really. The admin looks when he has time.
And when something looks serious, who do you call?
KPMG
Anti-patterns

Questions to retire

Overused questions that scream “just another salesperson” — and only harvest what the client already knows:

“What keeps you up at night?” “What are your biggest pain points?” “What are your challenges with that?” “What's top of mind this year?”
KPMG
Phase 4

04Opportunity

KPMG
Phase 5

05Closing

KPMG
After the meeting

Capture it — or it never happened

KPMG
Recap

The method on one page

1
PrepareResearch + question list (phases 2-3)
2
OpenGenuine relationship, state the purpose
3
BusinessCurrent state, their words
4
TechnicalBroad, then 3 deep
5
OpportunityQualify — or disqualify
6
CloseTheir words + next meeting booked
7
CaptureCyberstackDB within the hour
KPMG
Exercise — 20 min

Live discovery, for real

The client (played by Bill): IT Director of an 800-employee Québec manufacturer. Recently promoted, small team, board suddenly asking questions about cyber after a competitor got hit by ransomware.

One volunteer runs the meeting (15 min), from hello to booked follow-up. Everyone else observes:

Watch forQuestion to answer
PhasesDid the meeting follow the 5 phases? Which were skipped?
RatioCount discovery questions vs opportunity questions
DepthBroad then 3 deep — or surface only?
ListeningDid follow-up questions build on the client's answers?
CloseWas a concrete follow-up secured before the end?