Onboarding is the first four days: I document your current setup, access paths and the failure modes that matter. Unglamorous, and the reason everything after it is fast. Then the obvious wins get cleared, expiring certificates, missing backups, noisy alerts, unpatched versions.