Choose how much help you need
Start free, do it yourself with our toolkit, have us build your program, or hand us the whole job. What you pay for the toolkit counts toward Program Setup.
Readiness Checklist
Free
See where you stand in 15 minutes.
- Two-page checklist by industry
- Every requirement in plain English
- Scoring guide to rank your gaps
DIY Toolkit
From $249 one time
For offices that want to do it themselves with solid templates.
- Security program (WISP) template for your industry
- Risk assessment workbook
- Service provider questionnaire and register
- Incident response plan template
- QI designation letter and annual report template
- Compliance tracker
- Step-by-step guide
Program Setup
From $2,500 one time
We build your program with you, tailored to your business.
- Gap assessment against every requirement
- Tailored WISP and written risk assessment
- Prioritized 90-day action plan
- Walkthrough with your team and IT provider
- First year of staff training included
- Toolkit purchase credited toward the price
Managed QI
From $500 / month
We serve as your designated Qualified Individual, all year.
- Written QI designation
- Program kept current
- Vendor and IT provider oversight
- Quarterly check-ins
- Staff security awareness training included
- Annual written report to your board or owner
- Scan and pen test coordination
- Incident support, with hours included
Staff security awareness training
Required by the Safeguards Rule for every employee. Industry-specific video modules, a quiz, certificates and completion records for your files.
Included with Managed QI First year included with Program Setup On its own from $99 a year
Typical starting points
Small tax office
Fewer than 5,000 individuals, one or two preparers. DIY Toolkit ($249), or Program Setup (from $2,500) if you'd rather not write it yourself.
Single-location dealer or mortgage broker
Usually over 5,000 individuals, so the full rule applies. Program Setup (from $5,000), then Managed QI (from $1,250 per location per month), plus staff training.
Dealer group or multi-location business
Several locations and systems. Managed QI across every location, with scan and pen test coordination and incident support.
Pricing FAQ
If I buy the toolkit, are you my QI?
No. The toolkit gives you the documents and guidance, and you designate your own Qualified Individual. We become your QI only under a Managed QI agreement.
Can I start small and upgrade later?
Yes. What you paid for the toolkit counts toward Program Setup, and many clients move from Setup to Managed QI once their program is in place.
Does my business need a QI if it has fewer than 5,000 individuals?
Yes. The small-business exemption removes four requirements, including the written risk assessment and the annual report, but every covered business still needs a QI and a written program.
Are vulnerability scans and penetration tests included?
Managed QI includes coordinating them. The cost of testing depends on the size of your network, so we quote it separately and upfront.
What if we have a security incident?
Managed QI includes a set number of incident-response hours each year. Beyond that, we bill hourly at a rate agreed in your contract, so there are no surprises.
Is staff training included?
Yes with Managed QI, for all of your staff, refreshed every year and reported in your annual QI report. Program Setup includes the first year for up to 10 learners at tax offices and 50 at dealerships. Toolkit buyers and other businesses can buy it on its own, priced by team size: from $99 a year for a tax office with up to 5 staff, and from $149 a year per dealership location with up to 10 staff. About the training
Is this legal advice?
No. We're security and compliance specialists, not a law firm. For legal questions about your obligations, talk to your attorney.
Not sure which step fits?
Email us with a question or to set up a free 20-minute call and we'll recommend one. Or start with the free checklist.