ORB Packaging + Pricing Guidance (Internal)

A) ORB Standard — 10 business days

Includes: all core deliverables + 1 restore test

Ideal price positioning:

  • Anchor as “cheaper than a security incident + cheaper than a failed recovery”
  • Keep it simple: fixed scope, fixed fee

Price band suggestion (adjust to your market):

  • SMB/nonprofit (10–50 users): 8,500
  • 50–150 users: 14,500
  • 150–500 users: 25,000

Don’t undersell. The value is clarity + proof + plan.

Optional add-ons (keep few)

  • Second restore test (different system): +4,000
  • Policy mini-pack (5 short policies): +6,000
  • Remediation sprint (2–4 weeks): priced separately
  • Fractional retainer (monthly): priced separately

SOW simplifier

  • Fixed deliverables, not “hours”
  • “Reasonable cooperation required” clause
  • Explicit out-of-scope list

Fast quoting rule

If the client is messy and unknown:

  • Quote the standard package
  • Offer add-ons after Day 2 once reality is clearer

Retainer bridge (post-ORB)

  • Monthly cadence + ownership
  • Scope: maintain posture, run plan, coordinate vendors
  • Includes: monthly review + quarterly restore drill + incident readiness

Option 2: Remediation Sprint then retainer

  • Fix top 5–10 items quickly
  • Then convert to monthly for prevention and governance