NerthusConsulting

Focused Engagements

Senior judgment, bounded scope, usable artifacts.

Nerthus engagements are designed around a consequential question, finding, event, or decision. Scope is written before work begins; regulated-systems work is principal-led.

Book a Confidential Fit Call
01

High-Stakes Second Opinion

$4,500 fixed fee Usually 1–2 weeks after complete intake

Best for

One consequential security, architecture, control, or evidence question that needs an independent written view.

Intended result

A decision-ready written opinion with clear reasoning, implications, and recommended actions.

Entry condition

A clearly framed question, available decision owner, agreed materials, and a deadline that permits focused review.

Included

  • Focused review of agreed materials
  • One structured working session
  • Written opinion with assumptions, reasoning, decision implications, and recommended actions
  • One clarification call after delivery
Not included

Implementation, formal assessment, legal interpretation, certification, or an opinion on matters outside the agreed question.

02

Risk-to-Closure Sprint

$22,500 fixed fee Typically 4–6 weeks

Best for

Closing a known finding, CAP, POA&M, or deficient control that requires analysis, remediation design, updated documentation, and an evidence path.

Intended result

A finding or control area prepared for management or external closure review, with accountable actions and defensible evidence.

Entry condition

One bounded control area, access to accountable owners, and sufficient non-sensitive materials through an approved exchange method.

Included

  • Finding and requirement analysis
  • Architecture, procedure, policy, and evidence review within the agreed control area
  • Remediation design and prioritized action plan
  • Creation or targeted revision of agreed policies, procedures, plans, or frameworks
  • Closure-evidence matrix and executive handoff
Not included

Unlimited remediation, enterprise-wide framework conversion, tool implementation, continuous control operation, or guaranteed closure by a reviewer.

03

Regulated Deal Assurance Sprint

$27,500 fixed fee Typically 4–6 weeks

Best for

Protecting an active buyer, customer, procurement, or diligence event where security answers, design, contract boundaries, and evidence must become coherent quickly.

Intended result

A buyer-ready security position and prioritized response to material exceptions that could delay or jeopardize the deal.

Entry condition

An identifiable event, known decision window, prioritized question set, and access to relevant business and technical owners.

Included

  • Review of priority diligence questions, stated requirements, and buyer concerns
  • Control-story and evidence-gap analysis
  • Focused architecture and boundary review
  • Decision-ready response language and remediation priorities
  • Executive briefing and handoff package
Not included

An audit, certification, attestation, legal opinion, penetration test, QSA function, or guarantee that a buyer will approve the deal.

“Assurance” means advisory readiness: improving the quality, consistency, and defensibility of the client’s control story and evidence. It does not mean independent assurance, an audit opinion, certification, or attestation.

04

Executive Assurance Partner

$15,000 per month Three-month minimum

Best for

Leaders with recurring regulated-system decisions who need defined access to senior architecture, risk, and remediation judgment.

Intended result

Recurring executive decisions moved forward with documented assumptions, dependencies, accountable actions, and a clear view of emerging risk.

Entry condition

Named executive sponsor, defined decision domain, monthly prioritization, and availability of internal owners.

Included

  • Agreed monthly advisory capacity and priority queue
  • Decision memos and design challenge for in-scope issues
  • Targeted review of findings, remediation plans, evidence, or vendor positions
  • Regular executive working session and action register
  • Monthly summary of decisions, dependencies, and next risks
Not included

Staff augmentation, 24/7 availability, managed security operations, incident response, project management office ownership, or service as the client’s accountable executive.

How engagements work

A clean path from trigger to handoff.

Fees shown are launch pricing for a defined scope. Travel, third-party tools, specialist services, and material scope changes require written agreement.

Choose the smallest responsible engagement

Start with the outcome—not a generic statement of work.

A fit call will identify the question, decision window, scope boundaries, and the most appropriate way to engage.

Book a Confidential Fit Call