01
Gap Assessment
The starter. Around twenty core NIST-based controls, for the company beginning from nothing. Quick, affordable, and it shows exactly where you stand.
Cyber risk management
Nine services, in the order they should happen.
Security fails when it is bought in random pieces. This is the sequence that works: find the gaps, rank the risk, write the rules, prepare for the bad day, train the people, control the vendors, prove it to outsiders, test it, then keep it alive.
Book a 30-minute scope call
We prescribe only what your situation needs. Nothing extra, nothing padded.
Step 1 to step 9, start anywhere true.
Most clients start at step 1 or 2. Every service is scoped to your environment and fixed in writing before work begins.
02
Cybersecurity Risk Assessment
The in-depth flagship. Full risk picture, a score out of 100, and a prioritized fix-it roadmap priced in writing.
03
WISP Writing
Your Written Information Security Program and core policies, drafted for how you actually operate and adopted for real. The FTC Safeguards Rule requires one of tax and financial firms.
04
Incident Response Planning
A plan with names in it, plus one tabletop exercise so the word insurers use, tested, is honestly true.
05
Security Awareness Training
A training program stood up with the completion evidence trail that insurers, regulators and customers ask about.
06
Vendor Risk Management
Know every vendor touching your data, tier them by risk, and put a repeatable review process behind new tools.
07
Insurance Readiness
Carrier applications and customer security questionnaires answered accurately, with evidence, before wrong answers cost you a claim or a deal.
08
Penetration Testing
A skilled human tries to get in, delivered by an independent testing partner we scope and translate. Sold when an insurer, auditor or customer requires the report.
09
Fractional CISO
The ongoing wrapper: a named advisor runs the whole program on a monthly retainer, annual reassessment included.
Being held to a specific framework by a customer, insurer or regulator? That path lives under Compliance Services.
Book your scope call.
Thirty minutes with an advisor.
We cover your organization, your deadline, and who is asking for what. You leave knowing the likely scope, the timeline, and your next step, with the price fixed in writing before any work starts.
Prefer phone or email?
(754) 216-9664 info@hardenwell.com
Do not include PHI or sensitive records in booking notes. See our Privacy Policy.