The frameworks that win deals, implemented from real expertise.

The full ISMS: scope, risk assessment, Statement of Applicability, Annex A controls, policies, internal audit, and support through the Stage 1 and Stage 2 certification audits. Gap assessment from $3,500.

ISMS maintenance $1,500–$3,500/mo.

The accredited certification-body audit is separate and paid directly: roughly $6,000–$12,000 initial, $12,000–$22,000 over the three-year cycle. We are the readiness partner, not the certifier.

The full quality management system: scope, quality policy and objectives, process maps built with your team, a risks-and-opportunities register, internal audit, management review, and support through the Stage 1 and Stage 2 certification audits. Gap assessment from $2,500.

QMS maintenance $1,000–$2,500/mo.

The accredited certification-body audit is separate and paid directly: typically $3,000–$8,000 initial, roughly $8,000–$18,000 over the three-year cycle for a small business. We are the readiness partner, not the certifier.

The full implementation program for defense-adjacent work: CUI flow-mapping and right-scoping, a gap assessment across all 110 controls, a System Security Plan, a plan of action with owners and dates, technical control implementation, and self-assessment support with artifacts on file.

Where a contract requires an independent third-party assessment, the assessor is engaged and paid directly. We are the readiness partner, not the assessor.

The certifiable standard for IT service management, and the rare certificate that wins IT service bids: a service catalogue, measurable SLAs, and the incident, change, release, and continuity processes stood up in your existing tooling, through internal audit, management review, and the Stage 1 and Stage 2 audits. Gap assessment from $3,500. Already run an ISO 27001 ISMS with us? The two standards share half their machinery, and the scope and price drop with it.

Service management system maintenance $1,000–$2,500/mo, usually combined with ISMS maintenance.

The accredited certification-body audit is separate and paid directly: typically $3,000–$15,000 initial, roughly $10,000–$25,000 over the three-year cycle. We are the readiness partner, not the certifier.

An AI acceptable-use policy, approved-tools list, data-handling rules, human-review requirements, an AI inventory, and a short rollout session, mapped to the NIST AI Risk Management Framework. Written for your business, not a template.