If your company is restructuring, the most dangerous document you own right now is the org chart.
According to bloomingbit, BitMart got hacked again ahead of its shutdown, and the founder said the security team was severely understaffed. Three independent sources covered it. I have been building custodial wallet services and exchange mechanics since 2018, and that one detail is what sticks with me: during downsizing, custody and monitoring duties rarely get dropped on purpose. They just stop having an owner, and nobody finds out until withdrawals move.
So write the minimum set down before the headcount changes, not after. Who approves a withdrawal, who holds key material, who reads the alert at 3am, who notices a signing service going quiet. Each of those needs a name on it, and no name should show up twice if you can help it.
I do security reviews of payment and account flows, custody and withdrawal paths included, as a small fixed-scope engagement (days, not months), and you get cost and timeline in writing within a day.
If you are mid-restructuring and want that minimum set mapped against your current rota, send me a message and I will tell you what it would take.