Security program advisory
Organize security decisions, responsibilities, and priorities.
Services
Incident response planning
Define how your organization will prepare for and coordinate a security incident.
How an engagement runs
What we’ll cover
Review contacts, decision owners, and existing incident procedures.
Identify access, evidence handling, and communication requirements.
Discuss availability and any response arrangement separately in a written agreement.
Scope
A scope you can review
Your proposal defines the systems covered, deliverables, responsibilities, timeline, and fees. Work begins after the scope and required authorization are agreed. Any ongoing coverage or response commitments are specified in the service agreement.
- Systems covered
- Deliverables
- Responsibilities
- Timeline
- Fees
After the work
Useful next steps
The aim is to help your team understand the findings and decide what to address first. Remediation assistance and retesting can be discussed as part of the engagement.
Questions
Common questions
Where should we start?
Start with the systems you rely on and what prompted your concern. We’ll discuss whether a focused assessment, an architecture review, or infrastructure support is the right fit.
What will the work cost?
Fees depend on the systems covered, complexity, deliverables, and any ongoing support. You’ll receive a written proposal with scope and fees before committing.
What will we receive after an assessment?
The proposal defines your deliverables. An assessment typically includes a summary of findings, supporting evidence, and prioritized remediation guidance. Any walkthrough, remediation assistance, or retest is agreed in the scope.
Can you help us meet compliance requirements and prepare for audits?
Yes. We assess your environment against the requirements that apply to you, help you close the gaps, and prepare the evidence and documentation your auditor or assessor asks for. The audit opinion, attestation, or regulatory filing itself comes from your independent auditor or assessor and your organization; your legal and audit advisers confirm what applies to you.
Do you offer ongoing support?
We can discuss ongoing infrastructure support. Systems covered, support hours, responsibilities, and response targets must be agreed in writing; the website does not promise continuous coverage.
Start a conversation
Your next step.Let’s make it clear.
Tell us about your environment and priorities. We’ll discuss the scope and outline the next steps.
Discuss your project