A questionnaire you can’t answer well
Hundreds of questions, a spreadsheet or a portal, and nobody on your team who owns security full time. Optimistic answers create risk later; blank ones lose the deal now.
- Home
- SaaS security reviews
Your enterprise deal is stuck in security review. Let’s unstick it.
One stalled questionnaire answered in 10 business days for a fixed fee, then a path to SOC 2 or ISO 27001 so the next deal doesn’t stall at all.
- CISSP
- CISA
- GSLC
- CISO and vCISO
- USMC veteran
- 30 years in IT and security
01 — Who this is for
B2B SaaS and tech services, 20 to 300 people
You sell to companies with security teams, and those teams have a process. These are the points where deals usually stop.
“Do you have a SOC 2 report?”
The buyer wants an independent report, and you don’t have one yet. There are honest ways to keep the deal moving while you get one.
Security terms in the contract
The master agreement includes a security exhibit, audit rights, or breach notification terms, and you need to know what you can actually commit to.
02 — How it works
Unblock this deal, then fix the pattern
The Sprint gets the current deal moving. The evidence pack and the gap list make the next one faster.
01
Questionnaire triage
We go through the questionnaire together. I separate what you already do but haven’t documented from what you genuinely don’t do yet.
02
Honest answers, backed by evidence
Every answer reflects what is true. Where a control doesn’t exist yet, the answer says so and gives a credible remediation date, which buyers respect more than a yes you can’t support.
03
A reusable evidence pack
Policies, diagrams, and control descriptions organized so the next questionnaire takes hours, not weeks.
04
Ranked gap list
The fixes that matter most to enterprise buyers, in order, so you know what to build next.
03 — Background
Programs built at scale, sized for yours
I’ve built the programs enterprise buyers are checking for, in environments much larger than yours.
- SOC 2 and ISO 27001 programs across 41+ data centersBuilt and run to the standard enterprise customers audit against.
- Critical vulnerabilities cut from more than 50 million to under 1,000In six months.
- Virtual CISO to seven organizations at onceSo I know what a lean team can sustain.
04 — Fixed fees
What it costs
Fixed fees, agreed in writing before work starts. No open-ended hourly arrangements.
Deal-Unblock Sprint
$3,500 fixed
One stalled security questionnaire answered in 10 business days.
- The completed questionnaire
- A reusable evidence pack for the next one
- A gap list with fixes ranked
Readiness Assessment
$6,500 fixed
Know exactly where you stand against one framework, with a 90-day plan.
- Gap report against SOC 2 or ISO 27001
- Risk summary
- 90-day roadmap
- Readout call
100% of the assessment fee is credited toward an implementation signed within 30 days.
Start with an assessmentProgram Implementation
From $30,000 fixed
ISO 27001 or SOC 2 built and audit-ready.
- Scope and gap assessment
- Risk assessment and treatment
- Policies, procedures, and controls written for how you operate
- Internal audit and management review
- Support through the certification or attestation audit
Next step
Book a call about your deal
Thirty minutes. Send the questionnaire ahead if you can, and tell me the deadline. I’ll tell you honestly whether the Sprint fits.
Loading available times… If nothing appears, open the calendar in a new tab.
Prefer email? jason@ineedaciso.com