Once a gap is clear, the next step is getting the right work done. Security Foundations turns assessment findings, audit recommendations and business requirements into practical improvements across the way you govern, document and operate security.
That could mean creating a policy, closing a testing finding, configuring a control or deploying a security solution. We shape the work around the outcome your business needs, with individually scoped modules, itemised fixed prices and project management where required.
Your priorities shape the engagement. Together, we define what needs to change, choose the right combination of work and agree how it will be delivered. You can commission one focused improvement or bring several modules together into a coordinated project.
Each module addresses an assessment finding, audit recommendation or identified need, with a clear outcome and agreed completion criteria.
Every piece of work has its own scope and fixed price. You approve the costs upfront, with any additional work agreed before it starts, so there are no surprises.
Receive the agreed improvement and a practical handover. We work with your team, IT provider or specialists, with project management available to coordinate delivery where needed.
Your proposal itemises the selected modules, fixed prices, deliverables, completion criteria and responsibilities. It also sets out dependencies, any specialist input and project management where included. You approve any changes to scope and price before additional work starts.
Explore six connected areas of delivery. Each can involve reviewing what you have, creating what is missing or putting an improvement into practice.
Choose an area to explore
The examples illustrate what can be scoped around your need.Give people clear direction, with policies and responsibilities that fit how your organisation works.
Clear expectations that people can understand and apply.
Turn security intent into usable guidance, so people know what to do and how to do it.
Knowledge that is usable, repeatable and easier to maintain.
Build the protections your risks call for, and make sure they fit the way the business operates.
Proportionate protections with clear operational ownership.
Turn findings into resolved issues, with a practical route from recommendation to implemented change.
Evidence of progress against the findings that matter.
Make technology work for your security objectives through purposeful configuration and engineering.
Technology configured to support your priorities.
Introduce the capabilities your business needs, with the design, deployment and handover thought through.
A deployed capability that your organisation can operate and sustain.
A clear scope. An itemised fixed price. Choose the work your business needs, with project management included where agreed.
Choose the modules that address your priorities, agree the outcome and fixed price, then deliver and hand over the improvement.
Start with the assessment, audit findings or business need. Agree what success looks like and an itemised fixed price for the modules required.
Deliver the agreed policy, documentation, remediation or technical work. Coordinate the people and dependencies, with project management where agreed.
Review the work against the completion criteria, explain what has changed and hand over the documentation and operational ownership.
Practical answers about this service, its scope and the next step.
Explore all our answersSecurity Foundations is practical delivery shaped around the priorities identified in an assessment, audit or business need. It connects the requirement to the work needed across policy, documentation, controls, remediation, engineering and systems. That may mean reviewing or improving something you have, creating something missing or implementing a new capability. You can commission a single module or combine several into a coordinated project.
Six connected areas shape the offering: policy and governance; documentation; security controls; remediation; configuration and engineering; and systems and solutions. The need determines the work. For example, a policy gap may call for a review or a new policy, while a technical finding may require a configuration change, an engineered fix or deployment of a suitable solution.
Yes. A module could be a focused policy review, writing the documentation you need, implementing a control or deploying a solution. You can choose one defined improvement or combine modules around a wider objective. Every piece is separately scoped, itemised and individually priced at a fixed fee.
Yes. The agreed work can involve configuring existing technology, engineering a change or designing and deploying a new security system or solution. We agree the requirements, systems, access, dependencies, completion criteria and delivery responsibilities, with practical documentation and operational handover included in the relevant scope.
Yes. Project management can be included to coordinate one project or several modules, including responsibilities, dependencies, milestones and progress reporting. This is agreed and itemised in your proposal, so it is clear what delivery support is included.
No. We work alongside your existing IT team or provider where appropriate, agreeing who delivers and operates each improvement. Samaryam Tech can carry out the scoped security work, coordinate specialist input and project manage the delivery where needed. The handover makes ongoing responsibilities clear.
No. Cyber Compass is useful when priorities are unclear, but it is not compulsory. Security Foundations can follow any assessment, audit finding or identified need. If you already know what needs attention, we can scope the relevant work directly.
Every piece of work is individually priced as a fixed price engagement. Your proposal itemises each module, its scope, deliverables and price, including project management or specialist work where agreed. You choose the modules you need and approve the costs before work begins, with no surprises.
We agree the boundaries, dependencies and completion criteria for each module upfront. If your needs change, any additional or revised work is scoped, itemised and priced for your agreement before it starts. We do not add unapproved work or charges to the engagement.
Start with a free discovery call. Tell us what matters to your business and where you need help. We’ll listen, explore your priorities and help you find a practical way forward.
