Who it applies to and the problem it addresses
Initial GAP applies when there is customer, audit, cyber insurance, growth or false-maturity pressure, but no clear read of risks, controls and evidence.
All pricing
Initial GAP + 3-6-12 Cybersecurity Roadmap: indicative range
$1,900–$3,500 USD
Indicative range. Final pricing depends on scope, company context, complexity, assets, available evidence and the terms agreed in the proposal.
Variables that affect cost
- • Company size and number of teams or owners involved.
- • Number of systems, environments, locations and critical processes in scope.
- • Frameworks, customer requirements or external pressures to assess.
- • Availability, quality and distribution of existing evidence.
- • Number of interviews and expected roadmap depth.
Typical scope
- • Posture and priority-gap map.
- • 30-60-90 roadmap and 3-6-12 view.
- • Evidence required by customers, audits or insurance.
- • Recommended next stage: Full, VIP, PenTest or readiness.
What is included
- • Risk and gap map.
- • Initial evidence inventory.
- • 30-60-90 roadmap.
- • 3-6-12 month view.
- • Owners and priority criteria.
- • Recommended next step.
What is not included
Certification, approval by an auditor, insurer or third party; total risk elimination; work outside the agreed scope.
Assumptions and process
- • We review context, external pressure, assets and available evidence.
- • We identify gaps, risks and pending decisions.
- • We deliver prioritized next steps connected to the roadmap.
Commercial terms
- Typical duration
- Approximately 3 weeks, depending on scope and information availability.
- Payment method
- International bank transfer
- Payment milestones
- One-time payment of 100% or, generally, 50% at the start and 50% after 30 days, as stated in the proposal.
- Taxes
- Prices exclude taxes. If a tax must be applied due to a legal obligation, it will be detailed in the proposal.
- Validity
- 10 days
Indicative range. Final pricing depends on scope, company context, complexity, assets, available evidence and the terms agreed in the proposal.
Frequently asked questions
Is the published range the final price?
Indicative range. Final pricing depends on scope, company context, complexity, assets, available evidence and the terms agreed in the proposal.
Which currency and payment method apply?
Values are expressed in USD and payment is made by international bank transfer. One-time payment of 100% or, generally, 50% at the start and 50% after 30 days, as stated in the proposal.
Does the service guarantee certification, compliance or absence of risk?
No. The service is delivered under the agreed scope and does not guarantee certification, external approval, full compliance, risk elimination or absence of incidents.