Ongoing GRC function
Managed GRC
$5,000 / month
Standard initial term of 12 months, subject to the signed agreement
Build, take over, or run your security governance program, with a named advisor managing the work.
DetailsAbout GetComply
GetComply provides an outsourced security governance, risk, and compliance function for growing software companies. A named advisor establishes, runs, and improves each client's security governance program.
Our approach
We use the GetComply Framework as the foundation for our work, then adapt its controls and procedures to each company's systems, risks, and requirements. The work includes developing policies and procedures, documenting controls, tracking risks and remediation, reviewing evidence, and maintaining the recurring governance activities.
We do the operational GRC work agreed in the engagement. The client remains responsible for its systems, management approvals, and risk decisions. Examinations and legal advice stay with independent qualified providers.
The GetComply Framework
The framework is our security-first control baseline. It sets out the controls and procedures we apply in every engagement and how we connect them to evidence, review results, and risk decisions.
It is an internal method, not a certification or a standard endorsed by a CPA firm. When a client needs a specific external framework such as SOC 2, we map the requirements against the client's actual scope.
Services
First SOC 2
Launch Readiness
$4,500 / month
Generally four to six months
Establish the program and prepare for a first SOC 2 examination.
DetailsStandalone assessment
Readiness Assessment
$7,500 one-time
A review of your current security program, controls, and gaps, with findings and a prioritized roadmap. Available separately from our monthly services.
DetailsExpanded Managed GRC
Scale
From $7,500 / month
Managed GRC with more environments, assurance requests, reporting, or coordination.
Details