For consultancies and vCISO practices
Your questionnaire work, done under your brand.
You sold the engagement. The form arrived. Your team is already on three other things. Send it to me instead — it comes back in your format, with your logo, every answer cited, and your client never learns my name.
First form free. Pay only if the standard is good enough to put your name on.
What comes back
The completed form
In the buyer's original spreadsheet, SIG Lite, CAIQ or VSA. Row count in equals row count out. No reformatting work for you.
Every answer cited
Each row points to the client document it came from — a policy section, a console screenshot, an architecture note.
A gap memo you can forward
One page listing what the client's documents do not support, with interim wording, an owner and a date. It reads like advice, not an excuse.
Your name on it
Delivered under your brand. You review, you submit, you are the author of record. I never contact your client, and I sign an NDA before anything is shared.
Same format as the memo you can download: sample gap memo → · sample spreadsheet →
Price
| Volume | Per form |
|---|---|
| First form | free |
| Single form | $180 |
| 5 or more a month | $150 |
| Rush (48 hours) | +$60 |
One revision round included. 14 days of support if the buyer's security team follows up. Standard turnaround is 72 hours from complete intake.
How it runs
- You send the form and the client's documentsNDA first if you need one. Policies, screenshots, the previous questionnaire if there is one.
- I confirm scope the same dayRow count, deadline, and anything I cannot answer from what was provided — before the clock starts.
- 72 hours later you get the file and the memoIn your format, ready for your review.
- You revise, submit, invoiceOne revision round is included. I stay available for their follow-up questions for 14 days.
Questions you are probably asking
- Who signs it? You do. I never sign as author of record, and I never present myself as your firm.
- Do you contact my client? No. All communication goes through you.
- What if the answers are wrong? Every answer is cited to a client document, so you can check any row in seconds. Where a document does not support an answer, it is flagged as a gap instead of invented — that is the part that protects you in front of the buyer.
- Can you handle volume? Two forms a day is comfortable. Tell me the month's volume up front and I will hold the slots.
- What do you need from me? The form, the client's existing policies and evidence, and the buyer's deadline. Nothing else.
Start
Send one backlog form. It comes back free.
If the standard is good enough to put your name on, we talk about volume. If it is not, you have lost nothing but the time it took to attach the file.
NDA signed before anything is shared. Files deleted 30 days after delivery.