top of page

Risk Assessment as a Service

How long is your list of things to do, and how much could be crossed off if you had the resources? It takes a lot of time to prepare a request for quotation (RFQ). It takes more time to evaluate the responses and get approval for budget. It takes still more time to manage the purchase orders and invoices. For a relatively small risk assessment, the time and costs of procurement can exceed the actual costs (and benefits) of the activity. There is also no guarantee of satisfaction with the end result when you have committed to the full price of the service. But there is a better way.

Every decision carries financial and performance implications. At SERT, we understand this all too well. Over many decades our team has helped hundreds of clients save millions of dollars with efficient procurement. Our team members have traversed the procurement landscape from all angles. We have seen all sides of the equation as clients, consultants, and as contractors executing on deliverables. This comprehensive experience of the contracting model helps us drive innovative procurement solutions such as the monthly subscription model. You'll like it.

Engaging specialists can be fraught with frustrations for both clients and suppliers alike. However, we firmly believe that this need not be the case. At SERT, we are committed to improving everything we do, including the procurement process, by alleviating these frustrations and paving the way for seamless collaboration. Driven by a shared experience of grappling with the complexities of procurement, we are continuously exploring and refining our approach to deliver better outcomes. Our focus on innovation ensures that we remain at the forefront of industry trends, constantly seeking to streamline processes and enhance efficiencies.


As Many SRAs As You Like

That's right. There is no limit to how many risk assessments you can do for one low monthly fee. Add as many SRAs as you like. We'll do them all to your complete satisfaction based on the subscription you choose. You can pause or cancel at any time.


Totally Asynchronous

Don't like meetings? Neither do we; but we've allocated up to two hours per week for meetings or stakeholder risk workshops if they are needed. The rest of the time, you can work on the SRAs at the times and places that suit you. Site visits, additional meetings, or workshops are easy to arrange.


Fixed Monthly Fee

You know exactly how much this service will cost so you will never run over budget. You can pause or cancel it at any time, or add to it with additional subscriptions if you need them. Add as many additional meetings or workshops as you need.


Unlimited Team Members

Invite your entire team so anyone can submit requests, add information, provide feedback, and track the progress of your security risk assessments. We use leading edge products such as Trello, Zoom, and SECTARA.

It's "you'll never go back" better.

A subscription model for risk assessments (RAs) presents several advantages when contrasted with the time-consuming traditional approach of request for quotations (RFQs) and the associated uncertainties in price and quality.


  • Predictable Expenses: You can budget more effectively with a fixed monthly cost, avoiding the wide price range ($20,000 to $300,000) typical of traditional SRA projects.

  • Efficiency Gains: The ability to conduct multiple assessments over time without incurring additional costs encourages ongoing security posture improvements without the financial burden of project-based pricing.

Lightning Fast Delivery

  • Two Business Day Response: We will respond to any request or additional information within two business days.

  • Client-Controlled Pace: You dictate the pace of the assessment, ensuring you are satisfied with each step before moving on.

Flexible and Scalable

  • Adaptability: Starting and stopping the service as needed means unmatched flexibility, allowing you to align security risk assessment efforts with their evolving needs and priorities.

  • Unlimited Assessments: Conduct as many SRAs as desired, albeit one at a time per subscription, which lets you systematically address various parts of the enterprise or different security concerns over time.


Streamlined Processes

  • Reduced Administrative Overhead: Eliminating the need for lengthy procurement processes, RFQs, and vendor selection reduces the administrative burden and accelerates the initiation of assessments.

  • Efficient Communication: Utilizing Trello for task management and limiting video calls to a maximum of 2 hours per week respects everyone's time and promotes efficiency while still allowing for meaningful interaction and progress.


Quality and Satisfaction

  • Continuous Improvement: The subscription model encourages a partnership approach, where we are motivated to consistently deliver value to maintain the subscription, leading to potentially higher quality outcomes for everyone.

  • Unlimited Revisions: We will modify and revise your SRAs until you are 100% satisfied with the quality of the final result.


Risk Mitigation

  • Proactive Security Posture: Regular assessments can help you avoid new threats, ensuring that security measures evolve in line with the risk landscape.

  • Customization: The ongoing nature of the service allows for assessments to be refined as we gain a deeper understanding of the client's unique risks and needs.


Strategic Value

  • Focus on Core Business: By outsourcing the SRA process, you can concentrate on your core business activities, knowing that security risks are being systematically and professionally addressed.

  • Long-Term Relationship: Establishing a long-term relationship with us can lead to deeper insights and more customized advice over time, as we become more familiar with the nuances of your organization’s risk profile.


This model represents a significant shift from traditional project-based security assessments towards a more flexible, cost-effective, and strategic approach to managing security risks.


Organizations, particularly those with dynamic environments or those looking to enhance their security posture without committing to large, one-off project expenses, find this subscription model highly appealing.

Membership levels

  • CSO/CISO as a Service

    Every month
    +USD 200 Initial setup
    Weekly workshops and offline support.
    • 4 hrs/wk of meetings, coaching, team leadership, & training
    • Unlimited email support, adivce, mentoring, and guidance
    • Security & Risk Management Framework development
    • Trello boards to track and manage security issues & threats
    • SECTARA Bronze plan to track and manage risks
    • Easy credit-card payments
    • Pause or cancel anytime
  • Best Value


    Every month
    One SRA at a time. Pause or cancel anytime.
     7 day free trial
    • Unlimited risk assessments
    • 7 Day Free Trial to get you set up before you commit
    • Easy credit-card payment saves procurement & invoicing costs
    • Pause or cancel anytime
    • One risk assessment at a time
    • Includes Trello, Zoom, and SECTARA software subscriptions
    • Satisfaction guaranteed - unlimited revisions
    • Less than 2 business day response time (most within 24 hrs)
    • Site visits and additional workshops optional extras
    • No wasted energy on procurement. Sign up now, cancel anytime
    • Fixed price engagement with unlimited risk assessments
  • Enterprise

    Every month
    Up to five concurrent risk assessments
     7 day free trial
    • Unlimited security risk assessments
    • Includes CSO/CISO as a Service
    • Two business days or less response time
    • Two concurrent risk assessments
    • Unlimited users
    • Easy credit-card payments
    • Satisfaction guaranteed - pause or cancel at any time
    • Weekly meetings or workshops
    • 25% discount on site visits and travel time
    • SECTARA risk registers for 5 users (optional)
    • Trello or Clickup Project Mgmt for 5 users (optional)
bottom of page