Browse the shelf
5 kits · one-time pricingStart where you are
Packaged around the decision you actually face
Where obligations differ by economic operator — like the CRA, split into manufacturer, importer and distributor packs.
Where the job is functional artefacts — like DORA, packaged as the Register, the incident classifier, third-party risk and the rest, with bundles.
When the documents aren't enough, the practitioner is
Fixed-price time from the practicing CISO who maintains the kits. Quoted by written proposal, invoiced directly, never through the store.
You ran the scope check or opened the kit and are not sure which role or category you fall into — or you need the answer in writing before a customer, an auditor or a supervisor asks for it.
DetailsAn obligation date 6–18 months out, a customer questionnaire, or a letter from a supervisor or a notified body. Three variants, one per regulation.
DetailsYou have had a review and need someone to keep the risk register, the policies and the management reporting alive — without hiring a full-time security lead yet.
Details