Services, scope, and starting prices.

What you receive

• An executive summary and supporting findings
• A prioritized action plan
• A one-hour results meeting with you and, if agreed, your IT provider

Typical starting environment

Up to 10 user accounts and 10 workstations, one Microsoft 365 tenant, and one location. Agreed checks can include account and sign-in settings, workstation protections and update status, backup practices, and basic external checks for one authorized public IP and one website/domain.

Your quote lists the exact checks, supported platforms, access, and delivery schedule. Servers, custom applications, extra tenants or locations, penetration testing, restore tests, and implementation are separate scope.

Starting engagement

• One agreed security question, using the information you supply
• A 60-minute discovery discussion
• A written decision brief with recommendations, assumptions, and open questions
• A 30-minute follow-up discussion

Up to four advisory hours total. Meetings, preparation, document review, and writing all count toward that time.

An assessment purchase is not required. New technical testing, implementation, formal audits, and broader consulting projects have a separate quote.

What the starting plan includes

• The Business Security Assessment, with its report, priorities, and one-hour results meeting
• A 90-day improvement roadmap for up to five priority actions
• Proposed owners, dependencies, planning windows, and evidence to request
• Two 45-minute working sessions and one 30-minute progress check-in

The starting assessment environment is up to 10 accounts and 10 workstations, one Microsoft 365 tenant, and one location. The same agreed-check boundaries apply as the standalone assessment.

Up to six additional advisory hours, including meetings, roadmap preparation, and review of supplied updates. Follow-up takes place within 60 days of the results meeting; the 90-day roadmap is the planning horizon.

Your team or IT provider implements the changes. Check-ins review supplied updates and evidence; implementation, rescans, technical retesting, and ongoing availability are separate work.

A plan around your priorities

Your quote can combine monthly advisory meetings, quarterly security reviews, an action register, and progress reports. Scope can build on existing findings or an agreed baseline.

We define covered systems, advisory time, meeting and review frequency, methods, deliverables, and contact arrangements in writing. An initial assessment or baseline review is quoted separately unless expressly included.

Scheduled advisory is not continuous monitoring, 24/7 support, incident response, or an unlimited-device service. No recurring agreement is required for an assessment or focused consulting engagement.