Engage SOW

SELECT YOUR SCOPE OF WORK (SOW) /FEE / SRO

CORPORATE CLIENTS

BUILD AND ORDER YOUR OWN SERVICE PACKAGE

WE OFFER FIVE (5) ENGAGEMENT MODELS (A, B, C, D, AND E)

Service Engagement A: (1-2 WEEKS) Week (approx. 60 hours) and save up to 50%

Choose your key objectives

• A1- Meeting Key Senior Management- Enterprise Mission Objectives
• A2- Meeting Key Business Management- Business Practices
• A3- Meeting Key Technology Management- Current Technologies
• A4- Meeting Key Security Management- Current Security Controls
• A5- Gathering Key Technical Data (Diagram, Data Flow, Policies, Procedures)
• A6- Reviewing & Analyzing the Information Across Cyber and Security Best Practices & Frameworks
• A7- Reporting Current State and Propose State – Maturity Model & Identify Key Risks
• A8- Recommendation of New or Revised Security Controls
• A9- Recommendation of New IT & Security Solutions
• A10- Any other client-defined objectives, which are not listed in this engagement

Service Engagement B: (4-6 WEEKS) 4 Weeks (approx. 200 hours) and save up to 50%

Choose your key objectives

• B1- High-Level Enterprise Risk Assessment (up to 3 sites)
• B2- Enterprise Policy Review & Development
• B3- IT Policy to IT Control (GRC) Compliance Framework Development
• B4- Security Awareness Program Development
• B5- Vendor Security Program Development
• B6- Vendor Cloud Security Risk Assessment ( up to five vendors)
• B7- Governance, Risk, and Compliance (GRC) Evaluation, Planning and Development
• B8- Security Software Development Life Cycle (SSDLC) Program Development
• B9- IT Technical Documents Developments (Policy, Process, Procedure, Network Diagram, Data Flow Diagram)
• B10- BCP or DR or Incident Response Plan Evaluation, or Testing, or Development
• B11- 3rd Party Internal and External Red Team Pen Testing or Vulnerability Assessment
• B12- Develop Change Control or Configuration Control Process
• B13- One IT Security Technology Solution (Upgrade or Replace)
• B14- IT Security Solutions, Products or Solution Evaluation, and Testing
• B15- Cybersecurity Vendors Legal Contract Review or Development
• B16- Any other client-defined objectives, which are not listed in this engagement

Service Engagement C: (3-4 MONTHS) 12 Weeks (approx. 600 hours) and save up to 50%

Choose your key objectives

• C1-Enterprise Risk Assessment (up to 5 sites)
• C2-IT Infrastructure Vulnerability Scanning /or Remediation
• C3-Web Application Vulnerability Scanning /or Remediation
• C4-IT Security Infra Technology Upgrades or New Integration
• C5-Security Awareness Program Development
• C6-Vendor Security Program Development
• C7-Cloud Vendor Security Risk Assessment ( up to five vendors)
• C8-Business Partner Security Risk Assessment ( up to five partners)
• C9- Any other client-defined objectives, which are not listed in this engagement

Service Engagement D: (5-6 MONTHS) 24 Weeks (approx. 960 hours) and save up to 50%

Choose your key objectives

• D1- Nationwide Enterprise Risk Assessment (up to 5 sites)
• D2- Enterprise Risk Register or Risk Calculator or Risk Workshop Development
• D3- Global (overseas) Enterprise Risk Assessment (up to 2 sites, subject to add-on expenses for travel, lodging )
• D4- GRDP SOX, PCI-DSS, or HIPAA Compliance Evaluation and Readiness
• D5-Take an Interim Role as CIO, CISO, and V.P Cybersecurity IT Staff Augmentation
• D6-Take an Interm IT Staff Replacement Role as Sr. Cyber Security Architect, Advisory, IT Manager or Engineer
• D7-Interface with External Regulator, Auditors, and Other Authorities on your behalf on the given subject matter
• D8-Be a Subject Matter Expert (SMEs) or Cybersecurity Advisory to Support Senior Management and Business
• D9-Data Protection (Data Classification, Data Security, Data Flow, or Data Discovery)
• D10-Assets Protection ( Asset Inventory, Management, and Security Control Analysis)
• D11. Incident Investigation, Data Breach Analysis, and Records Preservation
• D12- Any other client-defined objectives, which are not listed in this engagement

h3>Service Engagement E: (3-12 MONTHS) 24 Weeks (approx. 960 hours) and save up to 50% Choose your key objectives

• E1 Cyber Threats Analysis
• E2 Compliance Readiness / Analysis
• E3 Governance, Risk, and Compliance (GRC)
• E3 Enterprise Risk Assessment
• E4 Cloud Application Risk Assessment
• E4 IT Security Consulting, Audits, and Advisory
• E5 3rd Party External Audits
• E5 NIST 800 Series Standards Deployments
• E6 ISO 27005 Risk Management Program Development
• E6 ISO 27000 IT Governance Program Development
• E7 ISO 27001/02 Information Security Policy Program Development
• E7 BS25999 Business Continuity Program Development
• E8 Fraud Detection and Prevention
• E9 Internal Security Risk Assessment Audits
• E10 External (3rd party) Security Risk Assessment Audit and Certification
• E11 Hacking and Authorized Penetrating Testing and Threats Assessment
• E11 Vulnerabilities Risk Assessments Technologies
• _________Data _______Network, ______Application
• _________Systems________ Endpoint _____Cloud Service Provider Vendor
• E12 Risk Assessment and Mitigation Program Development and Management
• E13 Gap Analysis
• E14 Data Breach / Hack Incidents Investigation
• E15 Control Audit and Analysis
• E16 Process Audit and Analysis
• E17 Businesses Impact Analysis (BIA)
• E18 Data Impact Analysis (DIA)
• E19 Privacy Impact Analysis (PIA)
• E20 Control Analysis and Evaluation
• E21 Development of Policies, Procedures, Standards, and Guidelines Development
• E22 BCP/DRP Program Development & Management
• E23 Fraud Detection and Prevention Risk Analysis
• E24 IT Governance Security Best Practices
• E25 IT Security Project Management
• E26 IT Staff Augmentation and Technology Support
• E27 Security Awareness Program Development
• E28 On-Site Security Training and Knowledge Transfer
• E29 Ground Zero to Simple or Complex Enterprise Start-Up
• E30 IT Solutions Planning, Development, Implementation, Deployment, and Support
• E31 Merger & Acquisition (M & A) – Business Partner Technologies Risk Analysis
• E32 Security Policy Program
• E33 Log Governance Program,
• E34 Firewall Policy Governance Program
• E35 Privacy Data Impact Program,
• E36 Risk Assessment Program
• E37 Vulnerability Mitigation Program,
• E38 Change Management Program
• E39 Business Continuity Planning Program,
• E40 Disaster Recovery Program, Secure Software
• E41 Development Program,
• E42 Computer Security Incident Response Program
• E43 Security & Privacy Awareness Program.
• E44 Vendor Risk Assessment Program
• E45 Black-Chaining Security Program,
• E46 Cloud Service Provider Risk Assessment Program
• E47 Legal Digital e-Discovery (Investigation Data Hack and Data Breaches)
• E48 Legal Cybersecurity Contracting, Data Security, Data Protection
• E49 Expert Witness Testimony & Reporting
• E50 Service Provider(s) Risk Assessment Program
• E51 Business Partners (s) Risk Assessment Program
• E52 Cybersecurity / IT Staff Resource Augmentation
• E53 (Other, Specify) ___________________________________
• ______________________________________________________