Statement of Work (SOW) — ORB (Template)
1) Project
Operational Resilience Baseline (ORB)
2) Objective
Provide a time-boxed baseline of security and operational resilience, including restore verification, and deliver a prioritized 30/60/90 plan.
3) Scope of work
- Discovery + intake
- Review of identity/access, email/collaboration, endpoint baseline (as available), SaaS baseline configurations
- Backup coverage review and execution of one restore verification test (agreed scope)
- Deliverables: exec summary, risk register, maturity scorecard, 30/60/90 plan, evidence pack
4) Timeline
10 business days from receipt of required access.
5) Client responsibilities
- Provide a POC
- Provide requested access in a timely manner
- Attend kickoff + readout meetings
6) Out of scope
- Penetration testing
- Full compliance audit
- Large-scale remediation implementation (unless separately scoped)
7) Fees
Fixed fee: $
Payment terms: <e.g., 50% to start, 50% at delivery>
8) Assumptions
- Access provided is sufficient for review
- Systems are reasonably reachable during business hours
9) Deliverable format
PDF and/or Markdown, delivered via shared folder.
10) Confidentiality
(Reference your MSA/NDA language.)