Supplier Pack.

Pass your client's security review, and keep passing it.

For suppliers to banks, insurers and investment funds, typically 20 to 500 people. Covers what regulated clients pass down through their contracts.

Sized for 120 people, 130 devices, 10 serversWhat's in it

Monthly

A month$1,620

One-off

Once$11,670

Why this mix

Built around what goes wrong for businesses like yours.

Every pack in it answers one of these. Nothing is in there to make the bundle look bigger.

Contracts that depend on passing your client's security review, every year.

Going through a smaller supplier to reach the bank behind it.

Your clients' regulator obligations for security and operational resilience, which reach you through their contracts.

Where you sit

Attackers go through the smaller supplier to reach the bank. Regulators know it, so your client's review will be thorough.

Regulated

A bank, insurer or investment fund, bound by its regulator's security and resilience rules.

Material service provider

Their obligations reach you through the contract, often with a shorter clock.

Fourth parties

Your IT provider and hosting. Your client will ask how you oversee them.

The client review

A typical supplier security review, against what this pack covers. The 20 Expert Hours go on the answers, the meetings and the testing scope.

Client security review · ExampleExample

Typical supplier security review items
Requirement	Covered by	Status
MFA on all remote and admin access	Hardened	Covered
24/7 security monitoring	Always On	Covered
Tell us of incidents within 24 hours	Always On, with Rapid Response clocks	Covered
Information security policy, approved and reviewed	Policy Kit	Covered
Oversight of your own suppliers	Policy Kit supplier policy	Covered
Annual independent testing	Scoped with Expert Hours	Planned
Staff security training	Habits	Covered

Start with Groundwork. We map it against what your client will ask.