Security Foundation Program

---

Includes:

• 10 core policies
• Incident Response Plan
• Risk register build
• Basic asset inventory framework
• 1 tabletop exercise planning session

Includes:

• 15–18 policies
• IR plan + tabletop exercise facilitation
• Business Continuity framework
• Vendor risk framework
• Data classification framework
• Access control governance structure
• 2 executive briefings 

Includes:

• Everything above
• Technical control mapping
• Policy-to-control crosswalk
• Security awareness program rollout guidance
• 6-month advisory follow-up (limited support)
• Audit-ready documentation formatting

• Tabletop Exercise
• Ransomware Readiness Assessment
• Vendor Security Program Setup
• Security Awareness Training Implementation