Rooksignal / monthly retainers
A security program with a clear monthly scope.
Compare three working scopes for small SEC-registered investment advisers. Start with a consultation to confirm fit and priorities.
Three service scopes
Flat monthly retainers
Scope and fee are working assumptions for discussion. Use the consultation to confirm priorities before an engagement begins.
Baseline
Establish the core controls and an evidence rhythm.
$1,500/month
- Microsoft 365 tenant baseline and gap roadmap
- MFA and Conditional Access review
- Quarterly evidence pack
Operate
Keep core safeguards and evidence moving through the year.
$2,750/month
- Everything in Baseline
- DLP, retention, and backup coordination
- Vendor oversight and evidence organization
- Ongoing monitoring of the agreed control set
Resilience
Connect response readiness and governance to the operating program.
$4,000/month
- Everything in Operate
- Incident response and customer-notification workflows
- Reg S-ID governance practices
- Annual tabletop exercise
Compare the included scope
Each step adds operating coverage while keeping the same monthly retainer structure.
| Features | Baseline | Operate | Resilience |
|---|---|---|---|
| Microsoft 365 controls | |||
| Tenant baseline and gap roadmap | Included | Included | Included |
| MFA and Conditional Access review | Included | Included | Included |
| DLP, retention, and backup coordination | Not included | Included | Included |
| Evidence and oversight | |||
| Quarterly evidence pack | Included | Included | Included |
| Vendor oversight and evidence organization | Not included | Included | Included |
| Ongoing monitoring of the agreed control set | Not included | Included | Included |
| Response and governance | |||
| Incident response and customer-notification workflows | Not included | Not included | Included |
| Reg S-ID governance practices | Not included | Not included | Included |
| Annual tabletop exercise | Not included | Not included | Included |
Illustrative draft tier names, monthly fees, and included scope. Final scope and fee are confirmed with the firm before an engagement begins.