Current state
Review existing practices, governance, key controls, and supporting evidence across an agreed scope.
Structured security maturity
For growing businesses that need a structured view of cybersecurity maturity because of customer expectations, insurer questions, enterprise contracts, board oversight, or program planning.
Starting at $7,500 CAD
What we do
This is a NIST CSF-aligned assessment, not a certification or formal audit.
Review existing practices, governance, key controls, and supporting evidence across an agreed scope.
Build a current-state NIST CSF 2.0 profile and identify meaningful gaps against target outcomes.
Prioritize improvements, assign practical next steps, and brief leadership in plain language.
Outputs
Receive a profile, gap analysis, prioritized security roadmap, and executive briefing. Findings are analyst reviewed and signed off by a CISSP-certified cybersecurity leader.
Use the roadmap with your internal team, MSP, or Fractional Security Leadership engagement for ongoing program ownership.
Practical answers
No. This is an assessment aligned with NIST CSF 2.0, not a formal audit or certification.
The agreed scope includes current practices, governance, controls, and available evidence against relevant framework outcomes.
A current-state profile, gap analysis, prioritized roadmap, and executive briefing.
The service starts at $7,500 CAD. Final pricing depends on organization size, scope, and evidence maturity.
Discuss your scope
Tell us about your business and what you need to understand. We will confirm scope, timing, and the most useful engagement.