One continuity program, priced up front
Three annual packages and a standalone BIA. Each is a fixed fee set by your size, number of locations and regulatory burden, not by the hour. These are starting prices; your proposal confirms the exact figure before you sign.
Standalone BIA
First-time buyers and audit findings
from $15,000
one-time
- Critical processes and their owners
- Recovery objectives (RTO, RPO)
- System, vendor and staff dependencies
- Report to leadership
Credited in full toward a retainer signed within 90 days.
Essentials
Smaller or lightly regulated firms
from $2,000 /month
$24,000 a year
- Annual business impact analysis
- Core business continuity plan
- Crisis management plan
- One tabletop exercise a year
- Annual report to leadership
Professional
Most mid-sized clients
from $4,000 /month
$48,000 a year
- Everything in Essentials
- Department-level plans
- Risk assessment
- Vendor resilience review
- Staff training
- Quarterly plan updates
- Audit and customer questionnaire support
Regulated
Banks, healthcare, government contractors
from $8,000 /month
from $96,000 a year
- Everything in Professional
- Regulator-specific documentation (FFIEC, HIPAA, CMMC)
- Additional exercises
- Multi-site coverage
- On-call incident support
Compare what each package includes
| Included | Standalone BIA | Essentials | Professional | Regulated |
|---|---|---|---|---|
| Business impact analysis | Once | Yearly | Yearly | Yearly |
| Continuity and crisis plans | No | Core plans | Plus department plans | Plus multi-site |
| Tabletop exercises | No | One a year | One a year | Additional exercises |
| Risk assessment and vendor review | No | No | Yes | Yes |
| Audit and questionnaire support | No | No | Yes | Yes, regulator-specific |
| Plan updates | No | Yearly | Quarterly | Quarterly |
| Incident support | No | No | No | On call |
How billing works
- Annual agreement, billed monthly or quarterly in advance; [X]% off when you pay the year upfront.
- Size bands within each package: 100 to 250, 251 to 500 and 501 to 1,000 employees, plus [AMOUNT] for each additional location.
- A first-year setup fee of [AMOUNT], because the first BIA and plans take the most work.
- Work outside your package (extra exercises, sites, incident support) at [HOURLY RATE] an hour.
- Price reviewed at renewal, and changed only when your scope changes.
What we don't do, and what we need from you
We don't implement IT disaster recovery, provide alternate work sites or act as your cyber incident responder. We plan, test and document; your IT team or providers run the recovery.
You provide an executive sponsor, time from your department leads for interviews, and timely approval of documents.
Not sure which package fits?
A free 30-minute readiness review tells you where you stand and which package covers what your auditors and customers expect.