Pricing architecture

Pay for the depth of work, not an arbitrary bundle of activities.

The commercial model is progressive: free assessment → paid preliminary assessment → thorough investigation → response specification → remediation → verification.

Pricing correction: the website previously introduced a paid “Technical Risk Assessment” price that was not part of the agreed Risk Services framework. That has been removed. The framework establishes the service ladder and boundaries, but the stored framework documents do not contain approved dollar amounts for the paid Risk Services tiers. Until those prices are formally fixed, paid tiers are shown as Quote rather than inventing figures.
ServiceCommercial statusWhat it buysIncluded services / activities / tasks
Free Assessment
Assessment
FreeA low-friction entry assessment that identifies signals, obvious concerns and areas that may warrant deeper investigation.
  • Initial case / system intake
  • Definition of the immediate assessment question
  • Review of basic information supplied by the client
  • High-level scan for obvious risk signals and gaps
  • Initial identification of areas requiring attention
  • Preliminary prioritization of those areas
  • Concise assessment outcome
  • Clear indication of whether deeper investigation may be warranted
Peripheral Assessment
Assessment / Preliminary Investigation
QuoteA broader preliminary assessment for clients who need more than a basic scan but are not yet commissioning a full investigation.
  • Everything required to establish the agreed preliminary scope
  • Broader review of supplied case / system evidence
  • Review of relevant documents, records or technical information
  • Cross-checking of material indicators
  • Identification of candidate problem areas
  • Preliminary grouping and prioritization of candidate issues
  • Identification of information/evidence gaps affecting confidence
  • Preliminary risk picture
  • Recommended areas for full investigation
Thorough Assessment / Investigation
Investigation → Diagnosis
QuoteThe principal investigative service. It establishes material Findings from evidence and explains what is wrong and why it matters.
  • Everything needed to establish the agreed investigation scope
  • Evidence intake and evidence-register maintenance
  • Evidence quality / relevance review
  • Indicator identification and traceability
  • Investigation of material candidate issues
  • Establishment of atomic Findings
  • Finding statements written solution-neutrally
  • Evidence references supporting each Finding
  • Materiality / significance characterization
  • Severity / priority assessment where applicable
  • Finding-level analysis
  • Diagnosis of contributing factors and conditions
  • Cross-Finding relationship analysis
  • Identification of contradictions, dependencies and unresolved matters
  • Overall diagnostic position
  • Investigation / assessment report
  • Finding register / evidence traceability
  • Conclusion describing what has been established
Mitigation Checklist
Response Specification
QuoteA concise response specification translating established Findings into the minimum set of response requirements/tasks.
  • Review of established Findings
  • Finding-to-required-outcome mapping
  • Definition of the required outcome for each covered Finding
  • Concise response/remediation task list
  • Evidence-of-completion requirement for each task
  • Dependencies / prerequisites
  • Responsible-party field where applicable
  • Status / tracking fields
  • Priority ordering
  • Concise implementation boundary statement
Summarized Solution Report
Response Specification
QuoteA high-level specification of what must be achieved to address established Findings.
  • Everything needed to establish the response-specification scope
  • Summary of established Findings
  • Response priorities
  • Finding-to-required-outcome matrix
  • High-level response specification for each Finding
  • Dependencies between Findings / responses
  • Evidence requirements
  • Verification criteria
  • High-level sequencing / implementation priorities
  • Overall response position
  • Explicit execution boundary
Detailed Solution / Remediation Specification
Response Specification
QuoteA detailed specification defining the target state, requirements, dependencies, evidence and acceptance conditions for remediation.
  • Complete upstream investigation / Findings required for the specification
  • Detailed Finding register
  • Remediation objective for each Finding
  • Precisely defined required end state
  • Detailed remediation requirements
  • Dependencies and preconditions
  • Sequencing requirements
  • Evidence requirements
  • Acceptance criteria
  • Verification method for the original Findings
  • Residual-risk considerations
  • Implementation notes where explicitly within scope
  • Exclusions and scope boundaries
  • Detailed response/remediation specification
Complete Service / Remediation
Remediation / Execution
CustomExecution of an approved response specification to perform the actual corrective work.
  • Review and confirmation of the approved specification
  • Implementation planning within the agreed execution scope
  • Execution of approved corrective activities
  • Configuration / process / documentation changes as applicable
  • Execution evidence capture
  • Change records
  • Issue escalation where scope or assumptions change
  • Completion status tracking
  • Remediation completion record
  • Preparation for verification
Verification
Verification
CustomTests whether remediation actually addressed the original Findings and records residual risk.
  • Review of the original Finding and acceptance criteria
  • Review of remediation evidence
  • Verification test planning
  • Execution of agreed verification checks
  • Comparison of results against acceptance criteria
  • Finding status determination
  • Residual-risk identification
  • Verification evidence record
  • Verification report / outcome
  • Identification of genuinely new Findings where applicable
Commercial rule

Downstream work builds on upstream work.

Investigation

Investigation establishes and explains what is wrong. It does not contain mitigation instructions.

Response specification

Anyone asking for a solution enters the investigation pathway. The specification defines what must be achieved; execution remains separate.

Remediation

Actual corrective work is a separately commissioned execution service based on an applicable specification.

Verification

Verification tests the original Finding against defined acceptance criteria and records residual risk.

Request a quote

Tell us what you need established, specified or executed.

Contact Risk Services