Frequently Asked Questions

How much do your Services cost?

 

Our Services have Subscription Levels as part of the Service Offering, each Subscription Level has a Responsibility Matrix assigned to it that determines the price; the more responsibility we have the higher the cost. Custom Designed Service's cost varies per organization, and money can be saved by signing up for two different Services. 

 

I know that doesn't answer your question directly, so let me try again. Our Services cost less than our competitors' services offering the same services. If you don't believe me, let's talk.

​

How long of contract terms do you offer?

​

Monthly, six months, and 12-months for most services. The monthly rate for 12-months is cheaper than the month-to-month rate, and you're locked into the rate with a 12-month contract; the monthly rate could increase. That said, we're willing to work with you and come up with terms that work with both of us. Time spent negotiating terms is time lost toward Compliance and Certification, so let's make it easy right away so we can get to work.

​

Do you offer a month-by-month rate?

​

Yes, see above.

 

Why should we choose First Row over other Managed Service Provider (MSPs)?

​

We'll likely be cheaper because you'll receive our Friends and Family discount. And, we're a metrics-focused organization and I'll put our numbers and stats up against any other MSP's numbers in terms of Service Level Agreements and time needed to achieve Compliance and Certification.

​

We're a brand new startup, do you offer special rates for us?

​

First of all, congrats! There are many challenges for brand new startups, I don't want our rates to be another challenge for you. In honor of your question, I'll offer a special rate for startups who have been in business less than 12 months (proof required). Let's talk!

​

How long does it take to get a SOC 2 report?

​

If we hit the ground running with a GRC Platform, the wait for a SOC 2 Type 1 report is really on the Auditor and PenTest (if required) plus 1 week; while 90 days to get a SOC 2 Type 1 report sounds impressive, it's really not; it's average. We can get it done sooner.

​

How do you charge for Certification and Compliance Management?

​

vCISO Subscription Levels come with a max amount of Framework Compliance/Certification included; you can add additional Frameworks to your Service Package.

​

Do we have to use Vanta as our GRC Platform?

​

Nope. We highly recommend using a GRC Platform, regardless of the vendor. We're familiar with multiple GRC Platforms and can use whichever vendor you choose that the auditor agrees with.

​

Do you offer Vanta, or any other tools, for free?

​

Wish we could. Unfortunately, I can't offer free tools, but discounted prices may be an option. That said, we don't want additional costs to stop your organization from achieving it's goals, so we'll work with you on pricing to help lessen the immediate financial impact.

​

What timezones do you serve?

​

We serve all timezones and will accommodate all time zones within our normal business hours.

​

Do you offer after hours on-call service?

​

If you're looking for a quick question after hours, we can accommodate that. If you're looking for an after hours Incident Response, unless stated on our Responsibility Matrix, we're not on call. That said, our Incident Response Tabletop Exercises will have your team fully prepared for respond to an Incident, regardless of the time.

​

Seriously, what's with the graffiti on your website?

​

Just wanted a little contrast. Don't worry, we're not a graffiti artists.

​