Where do we start, and who does the work ?
An audit with no follow-on is a report in a drawer. The remediation plan takes the critical items back, defines the target architecture and reports on what has been closed, gap by gap. It is the work between the finding and the annual contract.
- Price9 500 € excluding VAT depending on perimeter
- Lead timeset by the perimeter
- Who it is forthe follow-on to an audit, ours or a third party's
1owner
From the finding to its closureThe same engineer who surveyed the gap closes it and proves it. No handover of the file, nothing lost between the audit and the work.
You hold an audit report, ours or a third party's, and the list of gaps is longer than the quarter. The cabinet prioritises them by real risk and cost of closure rather than by order of appearance, then closes the critical items itself or steers the work with your existing providers. It writes the target architecture, meaning what the estate should move towards and what you stop maintaining, and it produces a dated closure record for every gap, verified from the outside whenever that is possible. The perimeter, the order of work, the envelope and what stays outside the project are written before anything starts. The published price is 9 500 € excluding VAT for a perimeter comparable to a full audit.
Gaps actually closed, and the proof that they are.
- The gaps prioritised by real risk and by cost of closure, not by order of appearance.
- The critical items actually taken back, carried out by the cabinet or steered with your providers.
- The target architecture in writing: what the estate should move towards, and what you stop maintaining.
- A closure record per gap, dated and verifiable from the outside whenever that is possible.
- A final session with your executive team: what is closed, what remains, and why.
Perimeter and order
The gaps retained, their order, the envelope and what stays outside the project, written before anything starts.
Taking it back
Correction, hardening, access rights and backups taken back, in coordination with your providers.
Proof
Every closure is verified, and from the outside whenever that is possible.
Delivery
What has been closed, what remains open, and what that requires.
The limits, in writing.
An engagement that does not state its limits lets the client discover them at the worst possible moment.
- This is not a rebuild: the plan closes gaps, it does not reconstruct a site. A sovereign rebuild is what AEGIS is for.
- This is not a guarantee of absolute security: no exposed system offers that guarantee, and the engagement is one of reinforced means, in writing.
- The published price covers a perimeter comparable to a full audit. Beyond that, it is costed on the real perimeter.
Close it, then keep it closed.
At the end of the project, a governance contract takes over so that what has been closed stays closed. With no follow-on, the closure records stay with you.
A first conversation of 30 minutes
No obligation, no access to your systems. We look at whether the step you are considering is the right tool for your situation, and the cabinet says no when it is not.
A signed scoping letter
The perimeter, the read-only access, the people, the delivery date and the firm price. Nothing starts before your signature.
The report, then the decision
A dated report that holds up in front of a third party, a session with your executive team, and the list of gaps ranked. You then decide what follows, or you stop there.
5 questions, 5 answers.
The cabinet's answers, in plain terms. If your question is not here, ask it: the answer comes back to you in writing.
How much does the remediation plan cost?
9 500 € excluding VAT for a perimeter comparable to a full audit, which means up to three legal entities and ten sites. Beyond that it is costed on the real perimeter, and the envelope is written and accepted before anything starts.
Can it follow an audit carried out by someone else?
Yes, and that is a common case. The plan starts from the findings, re-verifies those that matter, then prioritises by real risk and cost of closure. What it needs is dated evidence, not the name of whoever produced it.
Who actually does the work?
The same engineer who surveyed the gap closes it and proves it, with no handover of the file. Where a specific skill is required, named senior freelances are mandated by the cabinet, under a signed confidentiality undertaking, inside the envelope of the contract.
Does this replace our existing provider?
No. On most estates the work is steered with the providers already in place, because they hold the access and the operational knowledge. The cabinet takes no reseller commission and gains nothing from criticising them: it closes gaps and proves the closure.
What proof do we get that a gap is really closed?
A dated closure record for every gap, verified from the outside whenever that is possible, which means a third party can replay the check. That is what lets you answer an insurer, a client audit or an inspector with a fact rather than an assurance.