ANNUAL SECURITY PROGRAM
Seven services. A year of planned progress.
Set frequency, allowances and delivery dates around your scope and annual goals. Track each work package separately.
Pricing and allowances require mutual agreement. This description does not provide unlimited service or create an effective contract.
| Service | Allowance basis | Annual frequency | Delivery and retesting |
|---|---|---|---|
| Host vulnerability assessment | Assets / sites / devices / code scope | As agreed | Per quote and scope version |
| Web vulnerability assessment | Assets / sites / devices / code scope | As agreed | Per quote and scope version |
| Security health check | Assets / sites / devices / code scope | As agreed | Per quote and scope version |
| Penetration testing | Assets / sites / devices / code scope | As agreed | Per quote and scope version |
| Source-code security assessment | Assets / sites / devices / code scope | As agreed | Per quote and scope version |
| Social engineering simulation | Messages / course licenses | As agreed | Per quote and scope version |
| Online security training | Messages / course licenses | As agreed | Per quote and scope version |
Additions and changes
Agree on cost and schedule impacts before adding targets, roles, courses or message volumes. Create a new scope version while preserving the original contract.
Phased delivery and acceptance
Each service has its own work package, execution batches, reports and acceptance. Completing one service does not close the entire annual program.
LET’S MOVE FORWARD
Start with a clear security plan.
Share your scope and goals to agree on the next step.