Client security questionnaires: pricing

How many days is your deal stuck because a questionnaire landed?

Usually three weeks. A two-hundred-question form gets opened by the person who understands it least — and closed again at the section on who logged in and when. The client's buyer waits, your salesperson promises «this week», and the signature never lands.

The questionnaire goes back to the client filled in

You forward us the client's email and get the questionnaire filled in down to the last item — CAIQ, SIG Lite or their own form. Where an answer is «no» and can become «yes» in days, we do it; where it cannot, we write the date and the plan.

With every answer we attach what they ask to see: written policies, screenshots of settings, logs. Follow-up questions come almost every time — they are answered by the same person who filled the form in, not by your salesperson from memory.

The answers stay with you. The next questionnaire — from this client or another — is closed in days: there is nothing left to gather again.

What the questionnaire work covers

included: Filling in CAIQ, SIG Lite and the client's own forms
included: Gathering what they ask to see: policies and screenshots of settings
included: «No» answers that can be turned into «yes» within days
included: Written policies for the items the questionnaire names
included: Correspondence with the client until the last question is cleared
included: An answer bank the next questionnaire is built from
included: The deadline is named before we start and sits in the contract
paid to the vendor: Software licences and the auditor's fee — at the supplier's invoice

Your price

One questionnaire

$1,350 per questionnaire

We fill in the whole document they sent.

What the tier includes

included: One questionnaire, from the first question to the last point cleared

Retainer

$1,900 a month

Two questionnaires a month and the answer bank.

What the tier includes

included: Two questionnaires a month
included: An answer bank and a documents page that clears part of the questions

Extras

not included: External pen test to meet the questionnaire's requirementfrom $4,480
not included: SOC 2 readinessfrom $2,250
not included: Fractional chief information security officerfrom $2,500 a month
not included: We watch for attacks around the clock$18 per endpoint a month
not included: Preparing for a cyber policy renewal$2,250 one-off
not included: Patient records kept protected+$40 per seat a month
not included: Qualified individual under FTC Safeguards$2,500 a month
not included: If you are breached, we investigate — monthly$670 a month

Questions

There are four of us and the form has two hundred questions. Is this really for us?

Yes. The client sets the size of the form, not your headcount: the same form goes to a company of four and to one of four hundred. We price per questionnaire, so you pay for the document, not for your payroll.

What if the honest answer is «no»?

We write «no» and put the date and the plan next to it. The client's buyer reads answers like that every day and takes the deal off hold: what stops them is an empty box or a vague phrase, not a «no» with a date.

How long does it take?

We name the deadline once we open the document: it depends on the number of questions and on what you already have. The contract states it as a number. Correspondence with the client after delivery runs beyond that and is not billed separately.

Will the next questionnaire cost the same?

The price is the same, but it takes noticeably less time: the answer bank stays with you and repeated sections carry over. If two questionnaires arrive a month, the retainer is cheaper — the two numbers above show it.

Completing security questionnaires