A security program
you can hand to anyone.
A documented, audit-ready Written Information Security Program — covering risk assessment, policies, and incident response. Available standalone, even if we don't manage your IT.
Why Now
Usually, something specific
triggers the need.
Cyber insurance renewal
Most carriers now require a documented security program before binding or renewing a policy.
A client's vendor questionnaire
"Do you have a WISP?" is a standard question on vendor security assessments — and "no" can cost you the contract.
State data-security law
Several states require a WISP for any business holding residents' personal information, regardless of your size.
Getting ahead of SOC 2 / ISO 27001
A WISP covers much of the policy documentation those frameworks eventually require.
What's Included
Every document an insurer, client, or auditor expects.
Delivered as a complete, signed, dated program — not a template you fill out yourself.
How It Works
Three steps. Then an annual check-in.
Assessment
We review what data you hold, where it lives, who can access it, and what safeguards already exist — regardless of who manages your IT today.
Documentation
We draft the full program: policies, procedures, and an incident response plan, written in plain language your team will actually read.
Review & Maintenance
You sign off, roll it out to your team, and we schedule the annual review a WISP needs to stay valid as your business changes.
Pricing
A fixed fee, either way.
WISP Build
One-time · Scoped after assessment
Full assessment and documentation package — ready to hand to an insurer, client, or auditor.
- Data inventory & risk assessment
- Full policy documentation set
- Incident response plan
- Employee training materials
- Delivered as a signed, dated program
Annual Review
Yearly · Keeps your WISP current
A WISP is only credible if it's kept up to date. We review and update it annually as your business changes.
- Policy review & updates
- New risk assessment
- Re-issued, re-dated program
- Available whether or not we manage your IT
FAQ
Common questions
Need a WISP for an insurer, client, or auditor?
Free 30-minute call. We'll tell you exactly what's involved and what it'll cost — no obligation.