Risk Bundle 1: Assessing & Managing Risk

Cybersecurity Risk Bundle #1 (10% discount)

This is a bundle that includes the following two (2) ComplianceForge products that are focused on operationalizing cybersecurity risk management:

1. Risk Management Program (RMP)
2. Cybersecurity Risk Assessment Template (CRA)

Product Walkthrough Videos

These short product walkthrough videos are designed to give a brief overview about what the Risk Bundle #1 is to help answer common questions we receive.

Why Are These Products Part of The Bundle?

This bundle is designed for organizations that need a cost-effective and timely solution to obtain risk management documentation and a professional risk assessment template. Being Microsoft Word and Excel documents, you have the ability to make edits, as needed. Please note that if you want a customized bundle, we are happy to create one for you. Just contact us with your needs and we will generate a quote for you.

Cost Savings Estimate - Risk Bundle #1 

When you look at the costs associated with either (1) hiring an external consultant to write cybersecurity documentation for you or (2) tasking your internal staff to write it, the cost comparisons paint a clear picture that buying from ComplianceForge is the logical option. Compared to hiring a consultant, you can save months of wait time and tens of thousands of dollars. Whereas, compared to writing your own documentation, you can potentially save hundreds of work hours and the associated cost of lost productivity. Purchasing this bundle from ComplianceForge offers these fundamental advantages when compared to the other options for obtaining quality cybersecurity documentation:

• For your internal staff to generate comparable documentation, it would take them an estimated 300 internal staff work hours, which equates to a cost of approximately $25,000 in staff-related expenses. This is about 4-8 months of development time where your staff would be diverted from other work.
• If you hire a consultant to generate this documentation, it would take them an estimated 210 contractor work hours, which equates to a cost of approximately $63,000. This is about 3-6 months of development time for a contractor to provide you with the deliverable.
• This bundle is approximately 6% of the cost for a consultant or 15% of the cost of your internal staff to generate equivalent documentation.
• We process most orders the same business day so you can potentially start working with the documentation the same day you place your order.

Products Included in Risk Bundle #1

Risk Management Program (RMP) The RMP addresses the “how?” questions for how your company manages risk. This is an editable Microsoft Word document that provides program-level guidance to directly supports the WISP and DSP policies and standards for managing cybersecurity risk. In summary, this addresses fundamental needs when it comes to risk management requirements: How risk is defined. Who can accept risk. How risk is calculated by defining potential impact and likelihood. Necessary steps to reduce risk. Risk considerations for vulnerability management. The RMP is based on leading frameworks, such as NIST 800-37, NIST 800-39, ISO 31010 and COSO 2013.

Cybersecurity Risk Assessment (CRA) Template The CRA supports the RMP product in answering the “how?” questions for how your company manages risk. This contains both an editable Microsoft Word document and Microsoft Excel spreadsheet that allows for professional-quality risk assessments. The CRA directly supports the Risk Management Program (RMP), as well as the WISP/DSP's policies and standards, for managing cybersecurity risk. It does this by enabling your company to produce risk assessment reports.

Optional Professional Services (Add On)

ComplianceForge offers optional professional services to customize purchased documentation. Professional services are not required to customize ComplianceForge documentation. However, some clients want our subject matter expertise to help customize their documentation to meet their specific business needs. If you have any questions about our professional services, please contact us at: www.complianceforge.com/contact-us/.

We offer our professional services in bundles of: five (5), ten (10) & twenty (20) hours.

Purchased professional service hours will expire after 120 days (4 months) from the time of purchase before they expire.