Common questions.
What most people ask before reaching out.
How much does this cost?
Every engagement is quoted before any work begins. Most clients start with a fixed-fee assessment, so there are no surprises.
How long does it take?
A focused assessment usually takes two to four weeks. Building a full program takes longer, and we’ll give you a realistic timeline after the first conversation.
Do I have to sign a long-term contract?
No. Assessments are one-time and fixed-fee. Ongoing support is month-to-month.
What if I don’t have a security team?
That’s the most common starting point we see. You don’t need any security staff or expertise to begin.
What is a virtual CISO (vCISO)?
A virtual CISO provides the strategic oversight of a Chief Information Security Officer (setting direction, managing risk, and reporting to leadership) without the cost of a full-time executive.
What does GRC mean, and do you offer it?
GRC stands for Governance, Risk, and Compliance: setting policy, managing threats, and meeting legal or contractual requirements. It’s the core of what we do, built as one connected program.
Which industries do you work with?
Small and medium-sized businesses across healthcare, financial services, professional services, e-commerce, and more.