Products
Complete GRC Suite
Build a consistent approach to security, vendor risk, and SOC 2 preparation.
- Smart Risk Register
- NIST CSF 2.0 Readiness Toolkit
- Vendor Risk Management Toolkit
- SOC 2 Readiness Assessment Toolkit
Fractional GRC Lead
Program leadership, management reporting, audit liaison, and prioritized delivery.
- 20 professional hours per month
- Work prioritized within the included hours
- Additional work at $200/hour with prior agreement
- Priorities and response expectations agreed in writing
GRC Advisory
A regular sounding board for decisions, priorities, and light document review.
- 3 professional hours per month
- Work prioritized within the included hours
- Additional work at $200/hour with prior agreement
- Priorities and response expectations agreed in writing
GRC Coordination
Maintenance plus vendor reviews, questionnaire work, and stakeholder coordination.
- 10 professional hours per month
- Work prioritized within the included hours
- Additional work at $200/hour with prior agreement
- Priorities and response expectations agreed in writing
GRC Foundation Setup
Connect your security baseline, key risks, and first priorities into one plan.
- NIST baseline review and up to 15 initial risks
- Two priority policies
- A 90-day roadmap
GRC Maintenance
Risk updates, evidence follow-up, compliance calendar, and monthly status reporting.
- 6 professional hours per month
- Work prioritized within the included hours
- Additional work at $200/hour with prior agreement
- Priorities and response expectations agreed in writing
NIST CSF 2.0 Readiness Toolkit
Find where your security practices stand and what to improve first. Turn assessment answers into a clear, manageable action plan.
- Assess your baseline with a guided workflow
- Keep evidence and security gaps organized
- Assign remediation and report progress
NIST Evidence-Based Gap Assessment
Understand your gaps and prioritize remediation using agreed evidence.
- Interviews and agreed evidence review
- Documented findings and executive context
- Prioritized remediation roadmap
NIST Guided Readiness Review
A guided review of your completed toolkit, focused on understanding your baseline and choosing your next actions.
- Customer-completed assessment review
- One working session
- Apparent gaps and priority action plan
- NIST toolkit included
Operations & Compliance Setup
Replace scattered processes and documents with a working foundation.
- Owner interview and up to three process maps/SOPs
- A usable evidence-folder structure
- Handoff and next actions
Policy customization
Give your team practical rules that reflect how your business operates.
- Intake and one standard policy
- Practical implementation notes
- One revision included
Procedure & control design
Make responsibilities, operating steps, and evidence expectations clear.
- One defined process
- Roles, operating steps, and evidence requirements
- One revision included
Risk register setup
Turn an initial risk list into clear priorities, ownership, and treatment decisions.
- One workshop and up to 20 initial risks
- Risk scoring, owners, and treatment recommendations
- Handoff for your team
Security & Risk Foundation
Understand your security gaps and manage the risks behind them.
- NIST CSF 2.0 Readiness Toolkit
- Smart Risk Register
Security questionnaire support
Give customers accurate, evidence-backed answers during procurement.
- One questionnaire, up to 100 questions
- Responses grounded in existing evidence
- One revision included
Smart Risk Register
Know which risks need attention, who owns them, and what happens next. Give leadership a clear view of your decisions and follow-up.
- Prioritize risks with inherent and residual scoring
- Explain decisions with dashboards and risk profiles
- Track treatments, owners, and expiring exceptions
SOC 2 Evidence-Based Gap Assessment
Understand your gaps and prioritize remediation using agreed evidence.
- Interviews and agreed evidence review
- Documented findings and executive context
- Prioritized remediation roadmap
SOC 2 Guided Readiness Review
Understand what preparation involves and where your current practices need attention before a formal examination.
- Questionnaire review and document spot-checks
- One working session
- Preparation findings and roadmap
- SOC 2 toolkit included
SOC 2 Preparation
Keep readiness gaps, risk ownership, and remediation moving together.
- SOC 2 Readiness Assessment Toolkit
- Smart Risk Register
SOC 2 Preparation Sprint
Move from readiness findings to a focused preparation plan and essential documentation.
- Security-category assessment and initial risk register
- Three policy customizations
- Evidence plan and working sessions
SOC 2 Readiness Assessment Toolkit
See what needs attention before a SOC 2 examination. Organize your scope, evidence, and remediation so your team knows where to focus.
- Work through 61 criterion-mapped questions
- Scope Security and optional TSC categories
- Track evidence, readiness gaps, and remediation
Toolkit onboarding
Start using your toolkit with a workflow your team understands.
- Preparation for your selected toolkit
- 60–90-minute working session
- Brief follow-up and next actions
Training & workshops
Help your team apply GRC practices in their day-to-day work.
- One remote 60–90-minute session
- Preparation and training materials
- Follow-up for your team
Vendor Risk Essentials
Connect vendor findings with your wider risk decisions and follow-up.
- Vendor Risk Management Toolkit
- Smart Risk Register
Vendor Risk Management Toolkit
Make vendor decisions with a consistent view of risk. Keep due diligence, review findings, and follow-up organized in one workflow.
- Collect responses with a vendor self-assessment
- Tier vendors and document review decisions
- See priorities in vendor and executive dashboards
Vendor Risk Program Setup
Give your team a repeatable way to decide which vendors need closer review.
- Inventory and tiering for up to 25 vendors
- Review procedure and two standard vendor reviews
- Handoff for your team
Vendor risk review
Understand a vendor’s risk before making an approval decision.
- Review a standard questionnaire
- Assess available assurance documents
- Findings and a debrief