Choose your pricing plan

Package 1 includes:

Initial Gap Analysis
- Review of audit findings and prioritization of issues.
- Development of a remediation action plan.
Policy and Procedure Updates
- Assistance with creating or updating up to 5 key policies (e.g., Access Control, Data Classification, Incident Response).
Technical Fixes
- Basic remediation support for up to 3 critical IT systems.
Training and Awareness
- One virtual session for staff covering audit findings and key security updates.
Progress Reporting
- Bi-weekly status updates with a final report on completed remediations.

Package 2 includes:

Detailed Gap Analysis
- In-depth review of findings, with risk ratings and tailored recommendations.
Policy and Procedure Updates
- Assistance with creating or updating up to 10 policies.
- Implementation guidance for basic compliance frameworks (e.g., NIST 800-171 or ISO 27001 controls).
Technical Fixes
- Support for remediation of up to 5 critical IT systems.
- Assistance with basic configuration of security tools (e.g., firewalls, endpoint protection).
Training and Awareness
- Two virtual training sessions: one for general staff and one for technical teams.
Third-Party Vendor Review
- Assessment of up to 3 key vendors to ensure compliance with security requirements.
Progress Reporting
- Weekly updates and a detailed final report with actionable next steps.

Package 3 includes:

Comprehensive Gap Analysis and Roadmap
- Full review of findings, with a roadmap to address high, medium, and low risks.
- Alignment with compliance frameworks (CMMC, NIST 800-171, SOC 2, ISO 27001).
Policy and Procedure Development
- Creation or enhancement of up to 15 policies.
- Full guidance on policy implementation and staff adoption.
Technical Fixes and System Hardening
- Remediation of up to 10 critical IT systems.
- Advanced configuration support for security tools (e.g., SIEM, IAM solutions).
- Vulnerability scanning and basic penetration testing to validate fixes.
Training and Awareness
- Three training sessions: general staff, technical teams, and executive leadership.
Third-Party Vendor and Supply Chain Review
- Assessment of up to 5 vendors, including contract reviews for compliance.
Audit Preparation
- Mock audit to prepare for upcoming external assessments.
- Guidance on documentation and evidence collection.
Progress Reporting
- Weekly updates, detailed mid-project review, and a comprehensive final report.

Mad Hatter Solutions