First Name

Last Name

Phone *

Email *

I appreciate you taking time to meet with me today. We have 40 minutes to learn more about how you use technology and what your problems are. Naturally you will have questions for me, and obviously I’ll have questions for you, but typically at the end of this quick discussion, we’ll make a decision about what our next step should be.

Sound good?

Okay. Mind if I start?

Step 2: Learn about the business

How many years has the business been operating?

Who are the owners and shareholders?

Who is the ultimate decision-maker?(and what’s the best way to contact the decision-maker?)

Who influences the decision?

Do you have a purchasing process?

If yes, what is it?

When does your new fiscal year begin?

Do you have a budget for technology?

What would you say is the Annual Revenue?

About how many people (employees and others) work in the business?

What would you estimate is the Headcount Expense?

What Vertical Industry is the business in?

What Regulatory Requirements must you follow?

What is the Monthly Cost to Manage IT (today)?

Do you allow employees to work from home?

Do you allow work from home on personal devices?

How many locations/ worksites?

STEP 3: Learn About The Systems

Do you have a current inventory of systems?

What are the most important applications used in the business (and where are they located)?

When was the last time you updated your equipment?

What are you currently using for data backups?

Are the backups routinely tested?

What is your business continuity plan?

How much client data do you have from the past?

How many previous employees have you had?

Do you have an employee offboarding checklist?

Has your email ever been breached?

What are your plans for the organization for the next few years?

How does technology impact your ability to execute these plans?

STEP 4: Learn About The Risk Exposure

When was your last security audit or review?

When was the last staff cybersecurity training?

How many financial transactions do you process?

What financial regulations must the company follow?

Has the company ever been ransomed?

Has the company ever paid ransom?

How many clients do you have?

Have any of your clients been ransomed?

Have you ever wired money to the wrong account?

Who manages your social media accounts?

Do you require the use of 2FA to login to your business accounts?

STEP 5: Summarize the Pain

Summarize their situation. Ask, “do I have that right?”

STEP 6: Pivot to the CSRA

Typically, at this point, based on YOUR ANSWERS, we recommend a Cyber Security Risk Assessment. This is a thirty-day professional services engagement. We will deliver a written report and findings presentation that will show your security gaps. Then you can decide how you want to manage your risk.

STEP 7: Ask for the CSRA Engagement

The fee for the CSRA is YOUR FEE AMOUNT. We schedule the work to begin after we receive the signed engagement paperwork. We are scheduling work two weeks out —would you like to start then? We would present your report and findings on pick a date Will that work for you?”

STEP 8: Share Your Why

Our CSRA is a comprehensive dive into your security posture. We have learned when well executed, the CSRA gives you and your leadership team both the focus and the information you need to manage your risk. We put our best people on this assignment. It is the most important work we do.