What do we present to the board, and how fast do we answer ?
For a listed company, digital risk is an item on the board agenda, and an incident is counted in hours. The Board tier carries the quarterly reporting to the board, the contractual audit of vendors, the preparation for an inspection, and a standby that answers within four hours seven days a week.
- Price45 000 € excluding VAT a year
- Lead time12-month term, billed quarterly
- Who it is fora listed company, a group, an organisation under supervision
4hours
Time to answer, 7 days a weekThirty incident hours are included. An incident that starts on a Saturday is not handled on the Monday, and the contract says so.
Digital risk is an item on your board agenda, your vendors are audited, and an incident is counted in hours rather than days. The Board tier starts with a sixty-hour initial audit, mapping and non-destructive offensive reconnaissance included, delivered to the board. The cabinet then holds twenty-two committees a year, two a month, plus one annual board session, keeps a live register with quarterly reporting in the board's own format and calendar, runs the contractual audit of your vendors, the preparation for an inspection and crisis management, and delivers four training sessions plus a VERA OS e-learning path. The standby answers within four hours, seven days a week, with thirty incident hours included and a timeline kept for your executive team from the first minute. Two hundred engineer hours a year are in the allowance. 45 000 € excluding VAT a year, billed quarterly.
What the board expects, on the board's calendar.
- A sixty-hour initial audit, with mapping and non-destructive offensive reconnaissance, delivered to the board.
- A fortnightly committee, twenty-two a year, and one annual board session.
- A live register with quarterly reporting to the board.
- The contractual audit of your vendors, the preparation for an inspection, and crisis management.
- Four training sessions, a VERA OS e-learning path, and a standby answering within 4 hours seven days a week.
Extended audit
Sixty hours, offensive reconnaissance included, delivered to the board.
Committee
Twenty-two sessions a year, decisions recorded, hours account presented.
Reporting
To the board, in its format and on its calendar.
Standby
Four hours, seven days a week, thirty hours included, a timeline kept for your executive team.
The limits, in writing.
An engagement that does not state its limits lets the client discover them at the worst possible moment.
- Two hundred hours a year: beyond that the published hourly grid applies, with written agreement.
- The contractual audit of vendors is not a legal act: it prepares the decision, your counsel takes it.
- A group with several legal entities belongs to the bespoke tier: the published price is not a ceiling.
When digital becomes an item on the board agenda.
The sovereignty diagnostic is deducted in full from the first quarter, and VERA OS is offered at cabinet rate.
A first conversation of 30 minutes
No obligation, no access to your systems. We look at whether the step you are considering is the right tool for your situation, and the cabinet says no when it is not.
A signed scoping letter
The perimeter, the read-only access, the people, the delivery date and the firm price. Nothing starts before your signature.
The report, then the decision
A dated report that holds up in front of a third party, a session with your executive team, and the list of gaps ranked. You then decide what follows, or you stop there.
5 questions, 5 answers.
The cabinet's answers, in plain terms. If your question is not here, ask it: the answer comes back to you in writing.
What does the Board tier cost, and how is it billed?
45 000 € excluding VAT a year on a twelve-month term, billed quarterly in advance, which is 11 250 € excluding VAT a quarter. The 2 900 € sovereignty diagnostic is deducted in full from the first quarter.
What exactly does a four-hour standby commit you to?
To answering within four hours of the alert, seven days a week, with a named engineer and thirty incident hours included in the annual allowance. What is committed is the response and the handling, not a repair time, because no honest engagement can promise a repair time on a system whose state is unknown at the moment of the call.
What does the quarterly board reporting contain?
The state of the register, the decisions taken and those pending, the incidents and their timelines, the position of the vendors against their contractual obligations, the regulatory items that moved during the quarter, and the hours account. It is delivered in the board's own format and on the board's own calendar, not in a format of the cabinet's choosing.
Does the contractual audit of vendors replace our legal review?
No. It establishes what each vendor actually holds, what the contract says about it, and where the two diverge, with dated evidence. Your counsel then takes the legal decision. The cabinet is an engineering practice and says so in writing.
We are a group with several entities. Is this the right tier?
If the entities share one direction, one register and one committee, yes. Beyond that, the bespoke tier applies and the price follows the real perimeter: the published 45 000 € is not a ceiling, and costing a four-country group under it would mean taking the difference out of the quality of the work.