For buyers
Fractional CISO (fCISO)
Learn more
Both
Policy package
Policies your team will actually follow, mapped to the framework in your contract.
Who it’s for
Teams that bought a template pack nobody can operate, or that have no written policies yet. We scope it to one framework: NIST SP 800-171, CMMC Level 1 or 2, PCI DSS, the HIPAA Security Rule, ISO/IEC 27001, or the SOC 2 Trust Services Criteria.
A policy nobody follows isn’t evidence. It’s a finding waiting to happen. We write a set sized to how your organization really works, map each document to the framework, and name who owns it and how often it gets reviewed.
Once you adopt the documents, they’re yours to run.
Deliverables
- Policies, standards, and procedures for the framework named in the quote.
- A control map from each document to that framework.
- Named owners and a review schedule.
- A short guide for the people who have to live with the documents.
Timeline
A single framework in a small environment is a shorter job than a multi-site one. The quote says which yours is.
Related
Next step
Start with a 30-minute call.
Tell us what you’re working on and when it’s due, and we’ll tell you the first two steps.
30-minute intro call on Google Meet