← All services

Security Plan & Backup Strategy

The short written document a small organization needs but almost never has — what you protect, how, who is responsible, and what happens when something goes wrong.

The first time a customer, an insurer or a bank asks 'do you have a security policy?', most small organizations discover the honest answer is no. The second discovery is that a twenty-page template downloaded from the internet is not the answer either — nobody reads it, so it protects nothing.

This produces the short version: a page that says what matters and who does what, a backup strategy that has actually been tested by restoring something, and a one-hour checklist for the day something goes wrong — who to call, what to switch off, what not to touch.

It is deliberately built to be kept, not filed. If it cannot be read in ten minutes by someone who has never thought about security, it has failed.

Prices reflect the time these engagements normally take. Where a service is priced by size, pick the tier matching whichever part of the description is larger for you — a small house with a great many devices belongs in the higher tier. If what we find on the day goes beyond the tier you picked, we will tell you before starting and agree any additional time with you first. We never bill for extra time you have not agreed to.

How it works

  1. What you are protecting

    The systems, the data, and the obligations that come with it — including the ones you did not know you had.

  2. Writing it

    Policy, backup strategy and incident checklist, drafted for the people who will actually use them rather than for a compliance folder.

  3. Proving the backup

    A restore test. A backup that has never been restored is a hope, not a strategy.

Often added to this

When we confirm the details by email, mention any of these — or we will suggest one if it fits — and it goes on the same invoice as the main work.

  • Extra time

    $150/hour

    When what we find goes past what was booked. Always agreed with you before it starts, never billed afterwards as a surprise.

  • Follow-up check

    $150

    A remote session a month or two later to confirm what was set up is still in place, updates are landing, and nothing new has crept in.

  • Staff briefing

    $225

    Thirty to forty-five minutes with your people at the end of a visit: what changed, what they need to do differently, and the scams aimed at businesses like yours.

  • Questionnaire answers

    $225

    A customer, insurer or bank has sent a security questionnaire. We answer it accurately from what we found, in the words they are expecting.

The full list of add-ons