Engagement Tiers
Three packages, sized to where you are.
Most engagements fit one of these three shapes. Pricing is shown as a starting-at floor — final scope is set after a discovery call. Every tier is ISO 22301-aligned and built for SMB operational realities.
Foundation
BIA + BCP for one critical function — your first defensible plan.
Starting at
$5,000
Typical duration
4–6 weeks
Best for
Companies with no documented BCP, or a single department/function under regulatory or contractual pressure to demonstrate continuity capability.
What's included
- Risk assessment and threat profile for one in-scope function
- Department-level Business Impact Analysis (BIA) with RTO, RPO, and MTPD
- Strategy Selection Workshop with the function's leadership
- Documented Business Continuity Plan with activation criteria and roles
- Plan distribution package (digital + offline copies)
- 60-minute plan walkthrough and Q&A
Not included
- Crisis Management Plan and CMT governance
- Emergency Response Plan and drills
- Supply chain mapping and monitoring
- Tabletop exercise (available as add-on)
- Role-based Training & Education curriculum (separate engagement)
- Most common
Program
Full BCM program build covering continuity, crisis, emergency response, and supply chain risk — your end-to-end resilience platform.
Starting at
$25,000
Typical duration
12–16 weeks
Best for
SMBs at 50–500 employees building a credible BCM program from the ground up — typically driven by enterprise customer due-diligence, ISO 22301 readiness, or material insurance/regulatory exposure.
What's included
- Enterprise risk assessment across facilities, technology, and supply base
- Multi-department Business Impact Analysis with consolidated recovery requirements
- Documented Business Continuity Plans for every critical function
- Crisis Management Plan with CMT governance, escalation triggers, and decision frameworks
- Emergency Response Plan with bespoke flip-charts and role assignments
- Initial Supply Chain Risk mapping with supplier risk register
- One full tabletop exercise with facilitated AAR and corrective action register
- Executive education for CMT members
- Plan deployment to SharePoint, mobile, and paper formats
- ISO 22301 alignment documentation suitable for audit / customer due-diligence
Not included
- Ongoing program governance after handoff (available via Enterprise tier)
- Real-Time activation support (available via Enterprise tier)
- Active supply chain monitoring beyond initial mapping
- Role-based Training & Education curriculum (separate engagement)
Enterprise
Program tier plus ongoing governance, real-time activation support, and active supply chain monitoring.
Starting at
$50,000
Typical duration
Year-1 build, then ongoing
Best for
Operationally complex SMBs and lower-mid-market companies whose continuity exposure justifies a permanent BCM partner — boards, audit committees, or insurance carriers expect demonstrated, maintained capability.
What's included
- Everything in the Program tier
- Quarterly program governance reviews and management reporting
- Annual exercise schedule (mix of tabletop, functional, and DR tests)
- Active supply chain monitoring via riscManager.com™ with configured alert thresholds
- Real-Time Support retainer with named primary and backup consultant
- Pre-negotiated activation rates and on-call response window
- Annual plan refresh cycle with version control
- Audit and customer due-diligence response support
- Optional ISO 22301 certification preparation
Not included
- Travel and on-site facilitation outside the contiguous U.S. (quoted separately)
- Major scope expansions (M&A integration, new business unit) re-quoted as additional engagements
- Role-based Training & Education curriculum (separate engagement, can be added alongside)
Not sure which tier fits?
Most discovery calls end with a clear recommendation in 30 minutes. If your situation needs a hybrid or a custom shape, we'll scope it on the call.