A good place to start Posture Snapshot
A senior review of where you stand, with a plan to match.
$3,500
One agreed fee, no extras
Readout within 5 business days of kickoff
- 60-minute kickoff and evidence walk-through
- Senior review of your NIST CSF 2.0 answers against what is actually in place
- Written findings and a ranked 90-day plan with owners
- 45-minute readout for you and your leadership
A good fit if: you would like a senior second opinion on where you stand, and a plan you can act on.
Incident-Readiness Tabletop
Rehearse the worst day before it happens.
$6,500
One agreed fee, no extras
Scheduled within 2 weeks
- A ransomware or email-compromise scenario built around your sector and systems
- Two-hour facilitated exercise with leadership and IT
- Decision matrix: who decides on payment, notification and shutdown
- After-action report with the plan and playbook gaps
A good fit if: an insurance renewal or board question is coming up, or your response plan has never been tested.
Compliance Readiness Assessment
HIPAA, SOC 2, ISO 27001, PCI DSS or NIS2: know where you stand.
From $7,500
Starting price · deposit to reserve, balance on delivery
2–3 weeks for a single entity
- One framework of your choice: HIPAA Security Rule risk analysis, SOC 2, ISO/IEC 27001, PCI DSS v4.0.1 or NIS2
- Scope agreed up front, then a gap assessment against that framework
- Risk register with likelihood, impact and owner
- A prioritised remediation plan you can hand to an auditor, regulator or customer
A good fit if: a customer, auditor, regulator or insurer is asking about HIPAA, SOC 2, ISO 27001, PCI DSS or NIS2, and you need to know what to fix first.