How much does managed service cost?

We generally recommend 1.5 days a month for the Audit Prep tier. 3 Days a month for the GRC and 6 days a month of vCISO time for the Enterprise tier.

What is included in the vCISO service?

Any service above and beyond the scope above will be agreed upon via Compyl contract management before commencement. This makes it very clear what the requirements are from both the customer and Compyl and it's all in one simple to manage spot.

I already have a managed service?

That's okay, Compyl can integrate into any environment and working relationship that a customer might already be engaged in. We work with you to make sure your goals are met on time and on budget using the power of Compyl.

Click edit button to change this text. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Solutions
Overview
How it Works
Continuously improve upon the security program while continuing to grow the business.
Integrations
Compyl works with the technology your organization works with.
Products
Audit Prep
Begin building a scalable security program.
Solutions
Risk management
Build and maintain a robust risk management process.
vendor management
Manage vendor due diligence and risk assessments.
GRC
Mature your security program quickly.
Policy Management
Create and centralize policies, standards, and procedures.
Contract Management
Securely store and monitor all contracts.
Enterprise
Streamline security with automated efficiencies.
Entitlement reviews
Establish and monitor permissions for all users.
it asset management
Catalog, access, and track all IT Assets.
Product
Frameworks
Frameworks
SOC 2 Attestation
Demonstrate the ability to effectively safeguard customer data's security, integrity, confidentiality, and privacy.
ISO 27001
Prove the strength of your Information Security Management System to prospects and customers worldwide.
HIPAA
Organizations handling health information need to have measures in place & follow them.
GDPR
Regulation for companies that collect and process personal information from individuals in EU.
PCI
For organizations that accept, process, store or transmit credit card information.
NIST CSF
Guides organizations in any industry to better manage and reduce their cybersecurity risk.
NIST SP800-53
Improve the security posture of information systems used within the federal government.
MAS
Guidelines to encourage best practices among financial institutions in Singapore.
HITRUST
This global security and privacy framework provides comprehensive information, risk, and regulatory protection.
Any Regulation,
Any Region,
Any Time.
We proactively monitor for the latest frameworks to ensure our customers environments remain secure at all times. Contact us and learn about the additional frameworks Compyl supports.
See All Frameworks
Partner Network
Resources
Resources
Glossary
Terms used in the InfoSec & Compliance community.
Blog
The latest on InfoSec and Compliance trending topics.
Guides
Let Us Guide You Through Your InfoSec & Compliance Journey.
Education Center
Learn how to use the Compyl Platform.
Security Sessions
Watch all Security Session Episodes
Case Studies
Real-world stories on how we help our customers.
Featured
How Long Is a SOC 2 Report Valid For?
Who Needs ISO 27001 Certification and Why?
What Is Compliance Software?
Company
Company
About Us
Our mission and purpose are unique, just like the solution we created.
Our Security
We are very serious about our security. See the measures we take.
Careers
Join our diverse team of intelligent, respectful, and passionate individuals.
Contact Us
We are ready to secure your organization today!

Security for Your Growth

Choose the right security plan for your organization and begin building a robust information security and compliance program.

Compare Products

Audit Prep

Unlimited users, Unlimited Integrations, Single Sign On.
Small businesses beginning to build a compliance and audit program.
Compliance and Audits are required.
We're trying to expand our capability, reduce effort and automate tasks.
WHAT IS INCLUDED?
1 Frameworks (SOC 2 or ISO 27001)
Shared Customer Service Associated
User training on Compyl
Readiness Assessment
Automated Control Monitoring
Information Security Mgmt System
Asset Management
Vendor List Management

Start Ups

GRC

Everything that is included in Audit Prep Package.
Small to Medium size businesses with security program in place.
Compliance and Audits are required
We're trying to expand our capability, reduce effort and automate tasks.
WHAT IS INCLUDED?
Up to 5 Frameworks
Dedicated InfoSec Manager
Security Awareness Training
Invite Auditors
Shareable Security Report
Vendor Management
Personal Onboarding
Risk Management

Enterprise

Everything in GRC Tier.
Medium to Large enterprise with established compliance programs.
Automation and compliance is key to our business.
Impressive Security and Compliance maturation.
WHAT IS INCLUDED?
Unlimited Frameworks
Phishing Training
Custom Forms
Custom Reporting and Dashboarding
Contract Management
Incident Management
OSINT Integration
Audit Management

MSP

If you struggle to manage InfoSec and Compliance internally, then our Managed Service may be just what you need.

Compyl vCISO Breakdown

Our premier offering includes the Compyl Virtual CISO managed service. With access to our CISO suite, we will be the architects for the entire information security program by developing, managing, and implementing the organization’s complete security posture.

Finding a qualified CISO has proven challenging for many organizations due to a lack of available talent. With the average CISO salary costing well over $200,000/yr,organizations have found our vCISO value to rapidly mature and maintain a comprehensive security program tailored for their unique needs.

On average customers save over400 hours,see a return in investment in6 weeksin comparison to traditional consultancy.

Organisation and support: SOC 2, ISO, HITRUST, SOX, GDPR, & NIST
Updates for new regulatory compliance requirements, legal obligations and framework revisions
Provide strategic guidance, oversight and leadership to compliance and governance
Train and educate on cybersecurity principles and best practices
Incident management including playbooks and desktop exercises
Infosec procurement management including reviews and advice
Secure development and coding best practices review and assistance
Risk committee x2
Create and Send Newsletters x2
Organizing penetration testing

Compare Compyl to other GRC Platforms!

See why Compyl wins every time!

Audit Prep

Move away from checklists and begin building a scalable security program.

Information Security Management System (ISMS)
Automated Gap Analysis
Dashboard/Reporting
Awareness Training
Custom Policy Generation
Single Sign On
Activity Logs
Audit Logs
Out-of-the-box Evidence Mapping
Compliance Management
Document Management
Endpoint Management
Vendor Management
User Management
Risk Management

Read LessRead More

GRC

Mature your security program with customization, automation, and support.

Information Security Management System (ISMS)
Automated Gap Analysis
Dashboard/Reporting
Awareness Training
Custom Policy Generation
Single Sign On
Activity Logs
Audit Logs
Out-of-the-box Evidence Mapping
Compliance Management
Document Management
Endpoint Management
Vendor Management
User Management
Risk Management
Business Continuity Planning
Monitoring Infrastructure
Workflow Automation
Custom Frameworks
On Demand Audits
Frameworks
Phishing
OSINT
Hardware Management
Contract Management
Incident Management
Audit Management

Read LessRead More

Enterprise

Centralize your security program with streamlined, automated efficiencies.

Information Security Management System (ISMS)
Automated Gap Analysis
Dashboard/Reporting
Awareness Training
Custom Policy Generation
Single Sign On
Activity Logs
Audit Logs
Out-of-the-box Evidence Mapping
Compliance Management
Document Management
Endpoint Management
Vendor Management
User Management
Risk Management
Business Continuity Planning
Monitoring Infrastructure
Workflow Automation
Custom Frameworks
On-Demand Audits
Frameworks
Phishing
OSINT
Hardware Management
Contract Management
Incident Management
Audit Management

Read LessRead More

Enterprise+

Scale your robust security environment with dedicated resources and guidance.

Information Security Management System (ISMS)
Automated Gap Analysis
Dashboard/Reporting
Awareness Training
Custom Policy Generation
Single Sign On
Activity Logs
Audit Logs
Out-of-the-box Evidence Mapping
Compliance Management
Document Management
Endpoint Management
Vendor Management
User Management
Risk Management
Business Continuity Planning
Monitoring Infrastructure
Workflow Automation
Custom Frameworks
On-Demand Audits
Frameworks
Phishing
OSINT
Hardware Management
Contract Management
Incident Management
Audit Management
Access Control Review
KPI Reporting
vCISO
Enterprise Vendor Management
Enterprise Risk Management

Read LessRead More

Overview

Products

Solutions

Risk management

vendor management

Policy Management

Contract Management

Entitlement reviews

it asset management

Frameworks

Any Regulation, Any Region, Any Time.

Resources

Featured

Company

Security for Your Growth

Compare Products

Audit Prep

GRC

Enterprise

Compyl vCISO Breakdown

Compare Compyl to other GRC Platforms!

Audit Prep

GRC

Enterprise

Enterprise+

Any Regulation,
Any Region,
Any Time.