Services
Security and compliance services for growing companies
Four practices, one senior point of contact. Each starts with a fixed-scope package so you know the deliverables, timeline and price before you commit.
Choose where to start
01
Compliance readiness
SOC 2, ISO 27001, NIST CSF, HIPAA, PCI DSS. From gap assessment to audit-ready.
03
vCISO & risk advisory
Fractional security leadership on a monthly retainer, from risk register to board reporting.
04
Forensics & incident response
IR plans, tabletop exercises and investigation support from a former cybercrime detective.
Packages at a glance
| Package | What you get | Typical length |
|---|---|---|
| Readiness Snapshot | Gap assessment, top-10 risks, roadmap, leadership briefing | 2 weeks |
| SOC 2 / ISO 27001 Readiness Program | Policies, controls, evidence plan, tooling set-up, mock audit, auditor introduction | 8–16 weeks |
| GDPR / CCPA Privacy Program | Data map, records of processing, DPIAs, notices, DPA templates | 6–10 weeks |
| vCISO retainer | Fixed monthly hours of senior security leadership | Monthly, 6–12 months |
| DPO-as-a-service | Designated DPO role and ongoing privacy operations (EU) | Monthly |
| Incident Response Readiness | IR plan, roles, evidence handling, tabletop exercise | 3–4 weeks |
Let’s talk about your next audit or customer questionnaire.
Book a free 30-minute consultation. You will leave with a clear view of what your framework requires and a realistic timeline.