Engagement options

A defined scope. A useful answer.

Start with your concern, environment, and timeline. We’ll confirm the scope and fee before work begins, so you know what will be reviewed and what you’ll receive.

For a defined readiness question

Focused Readiness Review

A reduced-scope review of one core environment or a defined question set, covering up to three selected priority areas.

  • Discovery call up to 60 minutes
  • Focused intake and evidence review
  • Scoped findings with priority gaps and recommended next steps
  • Follow-up call up to 30 minutes

Review coverage and the depth of the report and improvement plan are confirmed in the written scope.

Discuss this scope

For greater breadth or depth

Expanded Assessment

A separately defined scope for multiple environments, additional systems or stakeholders, or deeper evidence sampling.

  • Scope tailored before kickoff
  • Broader or deeper review as agreed in writing
  • Core assessment and planning outputs
  • Delivery conversation covering the expanded findings

The written scope sets the review boundaries, deliverables, and schedule. Implementation remains separately authorized.

Discuss this scope

For a more immediate deadline

Expedited Assessment

The same scope, depth, and core deliverables as Standard, with prioritized scheduling and a compressed review window.

  • Scope locked before kickoff
  • Evidence available within 2–3 business days
  • Clarification responses within one business day
  • Client and IT-provider contacts available during the review

Availability and response readiness determine fit. Delays or scope changes may require a revised delivery date.

Discuss this scope

Before you decide

A few practical questions.

Do we need to choose a package before contacting you?

No. Start with the reason you’re considering an assessment. We’ll discuss the environment, the decision you need to make, and the evidence available before recommending a scope.

Can our IT provider participate?

Yes. Internal IT, MSP, and vendor contacts can help explain the environment and provide representative evidence. Stakeholder availability and responsibilities are confirmed during scoping.

Will you make changes to our systems?

The assessment reviews the environment and recommends improvements. Configuration changes, hands-on remediation, or administration require separate written authorization and scope.

Does this certify our business as secure or compliant?

No. The assessment documents readiness observations based on available evidence. It is not a penetration test, formal audit, legal or privacy opinion, or compliance certification, and it does not guarantee third-party acceptance.

Can you help after the assessment?

Optional support can include implementation guidance, policy planning, vendor coordination, or validation of completed improvements. Scope, responsibility, and fees are agreed separately before that work begins.

The next step is a conversation.

Let’s put your
security in perspective.

Tell us what prompted the question.
We’ll discuss the scope, the fit, and the way forward.