The engagement
How we work, week by week.
Most security help is open ended. A retainer that never closes, a junior consultant learning on your time, a tool you are now responsible for. A Resolute engagement is the opposite. Four weeks, senior-led, a fixed scope, and a written plan you own at the end. Here is exactly what each week looks like.
You should finish knowing three things: where you actually stand, what to fix first, and what it will cost. In that order.
One call. We map your environment, your obligations, and what’s keeping you up at night.
A 60-minute conversation. We learn what your business does, what would hurt if it stopped, and what you’re already doing.
No tooling pitch. The goal is a shared picture of the environment and the obligations (regulatory, contractual, customer-driven) that actually apply to you.
What you get a confirmed scope and a shared map of your systems and the obligations that apply.
We work through your stack against the NIST CSF and produce ranked findings.
We review your environment against the NIST Cybersecurity Framework, interview the people who actually use the systems, and write findings in plain English.
Findings are ranked by what would hurt your business, not by CVE score. The list is short enough to read in a sitting and specific enough to act on.
What you get ranked findings in plain English, scored against the six NIST CSF functions.
Prioritized fixes, sequenced for budget and disruption.
A prioritized list with rough effort estimates. Most items you or your IT provider can do.
The ones that need us, we quote separately and fixed-scope, no surprise hours, no retainer creep.
What you get a prioritized, budgeted action plan with effort estimates you can hand to anyone.
Written report. Yours to keep. Yours to act on, with or without us.
You keep the report, the inventory, and the plan. If you want us back, you know where we are.
If you don’t, you’re not stuck. No managed contract that quietly renews, no proprietary tooling you can’t take with you.
What you get the full written report, asset inventory, and a NIST CSF maturity baseline. Yours to keep.
Why it is built this way
What makes a Resolute engagement different.
Senior-led from first call to final report
You work with a senior practitioner, not a junior bench. No hand-off after the intake call, no rotating account team, no learning on your time.
Fixed scope, fixed price
You know the cost before we start. No retainer that quietly renews, no surprise hours, no scope that drifts wider every month.
Ranked by what hurts your business
Findings in plain English, ordered by real-world impact rather than CVE score. Short enough to read in a sitting, specific enough to act on Monday.
You keep everything
The report, the inventory, and the plan are yours. No proprietary tooling you cannot take with you. No reseller kickbacks steering the advice.
Ready when you are
Book a free consultation, or start on your own.
A 30-minute call with a senior practitioner tells you whether a four-week engagement is even the right next step. No obligation, no sales script. Prefer to look first? The free 10-minute assessment gives you a NIST CSF maturity score and a PDF you keep.
Book a free consultation →Or take the free 10-minute assessment
Senior-led from the first call.