A productized version of the work we deliver on consulting engagements — at a fraction of the price. Six documents written the way auditors want to see them, plus 90 days with your vCISO Agent: it knows every document in the kit, so when you hit “describe your implementation” and freeze, you ask — and keep moving. Built by practitioners who charge $375/hour for the custom version of this.
Short, Level 1–scoped. Environment, boundary, system inventory. Five to ten pages. Editable in Word or Google Docs.
One page per practice. Each includes policy, procedure, and evidence guidance with passing-grade example language you edit for your environment. Covers AC, IA, MP, PE, SC, SI families.
Spreadsheet mapping every practice to the evidence sources that support it. Where it lives, who owns it, and how to produce it in one business day.
Self-assessment math you can defend. Plus guidance on what to enter into PIEE and when your prime will see it.
Catches the four mistakes that get submissions rejected: vague language, copy-paste leftover references, aspirational policies, and missing evidence.
A simple Visio/Lucid-ready diagram showing what's in scope. Many primes require this. Included — not an add-on.
A compliance agent trained on 20 years of CISO practice and on every document in this kit. Ask it what a practice means for your environment, what evidence you need, or how to word an edit — anytime, until you submit. $499/mo to keep it after 90 days.
“Industry best practices,” “appropriate controls,” “as needed.” Reviewer red flags. Our templates replace these with specific roles, frequencies, and systems the reviewer can verify.
Generic packs reference systems you don't use and roles you don't have. Our templates are scoped to small contractors (5–200 people) and tell you exactly what to edit.
Policies describing what you will do instead of what you currently do get flagged. Our pre-submit checklist catches this in five minutes.
Beautiful policies with zero artifacts. The evidence index workbook forces you to name the evidence for every practice before you submit.
We're shipping the Level 1 Template Pack in the coming weeks. Put your email in and we'll send one message when it's live — with a launch-day discount for early subscribers.
We're finalizing the template content now. Early subscribers get a single launch notification when it ships. No marketing emails in the meantime.
The Level 1 Kit is $1,499 at launch — one-time, no subscription, with 90 days of vCISO Agent access included. After 90 days, keeping the Agent is $499/mo (entirely optional — the documents are yours forever). A Pro tier at $1,999 adds an AI-assisted pre-submit review that catches the four rejection mistakes in your actual documents, plus a 30-minute expert consultation call before you submit to SPRS.
A compliance agent trained on 20 years of real CISO practice — and on every document in this kit. Ask it what a practice means for a company your size, what evidence a control needs, or how to word an edit for your environment. It answers with the control reference, not vibes. And it knows what it shouldn't answer: judgment calls get routed to a human, not improvised.
Because this is a productized version of work we do on $7,500 consulting engagements. You're not buying generic templates — you're buying our actual deliverables plus an agent that helps you finish them. If you'd rather pay less for generic templates from a marketplace, those exist. Our buyers pay for the confidence that the work product came from people who do this for a living.
For most small contractors handling only FCI, yes. The templates give you the structure and language, and the vCISO Agent is there for the 'what does this mean for us?' moments where template buyers usually stall. The Pro tier's AI review plus expert call exists specifically to eliminate any remaining doubt before you attest.
Then this pack isn't for you. Level 2 requires a full NIST 800-171 implementation and a C3PAO assessment — different product. Start with our free scoping tool to confirm which level you need.
Not under a standard license. If you're a consultant, MSP, or prime wanting to distribute this to multiple companies, contact us for a partner license.