Structured security maturity

A practical NIST CSF 2.0 assessment.

For growing businesses that need a structured view of cybersecurity maturity because of customer expectations, insurer questions, enterprise contracts, board oversight, or program planning.

Starting at $7,500 CAD

What we do

Turn a framework into business priorities.

This is a NIST CSF-aligned assessment, not a certification or formal audit.

Current state

Review existing practices, governance, key controls, and supporting evidence across an agreed scope.

Profile and gaps

Build a current-state NIST CSF 2.0 profile and identify meaningful gaps against target outcomes.

Roadmap and briefing

Prioritize improvements, assign practical next steps, and brief leadership in plain language.

Outputs

Evidence, context, and direction.

Receive a profile, gap analysis, prioritized security roadmap, and executive briefing. Findings are analyst reviewed and signed off by a CISSP-certified cybersecurity leader.

After the assessment

Use the roadmap with your internal team, MSP, or Fractional Security Leadership engagement for ongoing program ownership.

Practical answers

Frequently asked questions

Is this a NIST certification?

No. This is an assessment aligned with NIST CSF 2.0, not a formal audit or certification.

What does the review cover?

The agreed scope includes current practices, governance, controls, and available evidence against relevant framework outcomes.

What do we receive?

A current-state profile, gap analysis, prioritized roadmap, and executive briefing.

How is pricing determined?

The service starts at $7,500 CAD. Final pricing depends on organization size, scope, and evidence maturity.

Discuss your scope

Get a clear next step.

Tell us about your business and what you need to understand. We will confirm scope, timing, and the most useful engagement.