ONGOING COVERAGE
Stay compliant between audits, without hiring a team to do it.
What it is
Compliance is not a project that ends. Controls drift, staff change, vendors get added, and the evidence has to keep being produced. Our managed program monitors your compliance posture continuously so the next audit is a review rather than a rebuild, at a fraction of the cost of the personnel, licensing and tooling it would take to do in house.
Who it is for. Organisations that have achieved certification, or are about to, and have no one to keep it true.
What is included
- Security control monitoring and management
- Policy and procedure management, kept current rather than annually refreshed
- Recurring risk and security assessments
- A single information repository for evidence, so nothing is reconstructed under deadline
- Compliance consulting support on call
What you end up with
Your posture is monitored, your evidence accumulates continuously, and your next certification cycle costs a fraction of the first.
Not sure this is the right shape yet? Nearly everyone starts with an assessment and decides afterwards. Start within 90 days of the assessment and you take 25% off the first year of this engagement.
How pricing works
Priced against the number of controls under management and the frameworks in scope, starting at $5,500 per month. It is deliberately less than the personnel, licensing and tooling it would take to run the same monitoring in house, which is the entire argument for outsourcing it. Quoted on the call and fixed from that point.
- Your price is quoted on the free scoping call, not after we have started.
- Once quoted, it is fixed. No hourly billing and no change orders.
- Continue into a Virtual CISO or managed compliance engagement within 90 days and you take 25% off the first year of it.
Also available
Cybersecurity Assessment
Find out where you actually stand, in two to four weeks.
Virtual CISO
A security leader on your org chart, without the salary line.
Talk about ongoing coverage
Thirty minutes. Bring the framework, the deadline, and who is asking for it.