Your first compliance program, built from the ground up
For companies starting from zero: framework scoping, policies, controls, risk management and evidence, delivered as a working program you can maintain.
$4,997
Who this is for
Businesses with no existing policies or controls that need a defensible program for a contract, insurer or regulator.
What’s included
- Framework scoping and applicability statement
- 20+ policies written and approved with you
- Control set implemented with your IT provider
- Risk assessment and treatment plan
- Vendor management process and register
- Training program and evidence system set up
- Program handbook so your team can run it
How it works
- Discovery and scoping call
- Build, remediate and document in defined sprints
- Handover with evidence package and runbook
Questions
Timeline?
8–12 weeks.
Which frameworks?
SOC 2, HIPAA, PCI-DSS, CMMC Level 1–2, ISO 27001 or NIST CSF.
What happens after?
Most clients move to Managed Compliance Essentials or Complete to keep it running.
Compliance Buildout Program
$4,997