Claremont Security seal Claremont Security Contact
// Engagement_Structure / Fees

Engagements

Firms that hide how they charge are improvising. We are not. Three engagement structures, matched to the three things we do, every one scoped and priced in writing before work begins.

Engagement I

Secure AI Integration

A defined project with a defined end: Microsoft Copilot deployed inside your tenant, governed, and adopted by your staff.

  • Tenant-scoped Copilot deployment with verified training opt-outs
  • Data loss prevention policies built around your document types
  • A firm prompt library and live staff training
  • Usage logging and a client-facing AI statement
StructureFixed-fee project, typically delivered in weeks, with an optional standing governance retainer after.
Engagement II

Managed Security & vCISO

A standing relationship. We operate as your security department: monitoring, patching, credentials, and a named advisor who answers for your posture.

  • Endpoint detection and response on every workstation, 24/7
  • Patch management scheduled around filing season
  • Firm-wide credential vaulting with enforced MFA
  • Completed insurance and client questionnaires
  • Quarterly posture reviews with leadership
StructureFlat monthly retainer set by your firm's size band. No hourly meters, no surprise invoices, cancellable at renewal.
Engagement III

Compliance & WISP

Assessment and documentation: your actual posture turned into the written record the FTC Safeguards Rule and IRS expect you to produce.

  • Full safeguards assessment mapped to the IRS Security Six
  • A gap register ranked by exposure, with owners and dates
  • A signed WISP that describes the firm as it actually operates
  • Staff training with completion records
StructureFixed-fee assessment with a defined deliverable, plus an annual maintenance option that keeps the plan current.

How fees work here

Every engagement is priced before it starts. After a scoping conversation, you receive a written proposal with a fixed fee, a defined deliverable, and a timeline. If the scope changes, the fee changes in writing before the work does, never after. We do not bill hourly for engagement work, because hourly billing rewards slowness and makes your cost unknowable, and we do not believe a firm should have to guess what its security function costs.

What determines the number: your firm's size band, the systems in scope, and how much of the groundwork already exists. A ten-person practice with current tooling sits in a different band than a forty-person firm starting from a template WISP nobody has opened. That is why the number follows the conversation rather than preceding it.

Every engagement begins with a conversation

Thirty minutes, no charge, no obligation. You describe what you hold and what worries you; we tell you what we would prioritise, and whether you need us at all.