Free 30-minute consult
Thirty minutes with the consultant who would do the work.
Bring whatever has arrived on your desk: an insurer's renewal form, a client's security schedule, a due-diligence list, a question from the board. A senior consultant replies within one business day. No obligation.
Who you will speak to
Who takes the call
A senior consultant replies within one business day. The consultant on the call is the consultant who would scope the audit and do the work.
There is no sales team.
The thirty minutes
What the call is
A conversation about the questionnaire, schedule or list you have been sent, and what an audit would and would not evidence against it. It is about what you have been asked to sign, not about your firewall.
It is not a sales pitch, a scan or a technical interrogation.
This form goes to the consultant, not to a sales team.
What happens next
Four steps, in this order. There is no scope and no figure before the discovery meeting.
-
The 30-minute consult
Free, with no obligation. You will hear what an audit would evidence against what you have been sent, and what it would not.
-
Discovery meeting
If an audit is the right answer, we meet to establish which systems are in scope.
-
Written scope and quote
A high-level written scope and a fixed-fee quote, based on your environment. We give no scope and no figure before the discovery meeting, because both depend on what we find there.
-
Engagement
Nothing starts until you have approved the scope.
The audit itself is a fixed fee against a written scope. What it produces is set out on the cybersecurity audits page.