A security function, without a security hire
A security function for a business that needs one but cannot justify a hire.
From $1,500 per month. Prices in Australian dollars, excluding GST.
An assessment is a photograph. This is the film.
A one-off review tells you where you stood on one day. Six months later staff have changed, a new system is in, someone turned off a control to make something work, and nobody checked.
Most businesses this size do not need a full-time security person and could not keep one busy. What they need is someone who looks at the same handful of things every month and tells them plainly when one of them has drifted.
Six things, on a cycle
A monthly report an owner can read
Three numbers, one decision needed, one thing that changed. One page, not forty.
Control verification
Multi-factor authentication coverage, backups, patching. Checked, not asked about.
Risk review
What changed in the business, and what that changed about your exposure.
A short staff training slot
Brief, specific, and about what your people actually get sent.
A quarterly tabletop
A walk-through of a real scenario, so decisions get made before the day it matters.
Vendor questionnaire support
When the next customer security assessment lands, you are not starting from nothing.
Three levels, published
| Tier | Price |
|---|---|
| Foundation | $1,500 per month |
| Core | $1,900 per month |
| Priority | $2,400 per month |
Prices in Australian dollars, excluding GST. What differs between tiers is depth and response commitment, and that is set against your business on the call rather than guessed at from a table. A retainer with a response time nobody can honestly meet is worse than no retainer.
Retainer clients can add an annual re-check at $2,065 per year, retainer clients, so the evidence stays current for the next renewal.
A maximum of three retainer clients. Not a sales tactic — a retainer that gets a rushed hour at the end of a busy month is worth nothing to the business paying for it, and it is how this kind of engagement quietly stops being delivered. When the three are taken, the answer is that the three are taken.
This is oversight, not managed IT. We do not run your helpdesk, hold your admin credentials, or make configuration changes on your systems. Your IT provider does the work; this is the function that checks it was done.
Most people start with an assessment
The Readiness Check is usually the door into this, because it is hard to oversee something nobody has measured yet. Twenty minutes will tell you which order makes sense for you.