ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
CyMetric List Pricing Structure - Subscription
2
Annual subscription includes web based training, support, feature enhancements and regulation monitoring.
3
4
US Federal Cyber Related Statutes and Codes: AnnualMonthly
5
Health Insurance Portability and Accountability Act (HIPAA), Parts C and D$13,125.00$1,093.75
6
Defense Federal Acquisition Regulations (DFARS) 204.73$9,000.00$750.00
7
NIST SP 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations$9,000.00$750.00
8
Cyber Security Maturity Model Certification (CMMC) - Risk Based Programs Level 1 and Level 2$9,000.00$750.00
9
FedRAMP (Low/Low Impact SAAS/Moderate/High)$9,000.00$750.00
10
11
International Cyber Related Statutes, Codes and Standards
12
GDPR, The General Data Protection Regulation (EU) 2016/679$13,125.00$1,093.75
13
14
US State Cyber Related Statutes & Codes
15
California Consumer Protection Act/California Privacy Rights Act$13,125.00$1,093.75
16
Other state mandates may be available or requested for inclusion in CyMetric. Pricing for such state mandates or regulations would be determined by the complexity of the laws and the amount of time Harris Beach PLLC attorneys would need to develop the control mapping for the mandate.
17
18
Trade Association, Industry Group and Best Practices Model Codes:
19
Center for Internet Security (CIS) v8 Safeguards (IG1/IG2/IG3)$8,000.00$666.67
20
NIST Cybersecurity Framework (CSF) v2.0$8,000.00$666.67
21
CISA CPG for K-12 Phase 1$8,000.00$666.67
22
CISA CPG for K-12 Phase 2$8,000.00$666.67
23
CoSN Trusted Learning Environment (TLE) for Primary/Secondary Education$9,000.00$750.00
24
NIST SP 1800-25/26 Ransomware Risk Mitigation Program$8,000.00$666.67
25
26
ISO 27001:2022/27002**$10,000.00$833.33
27
AICPA Systems and Organization Controls 2 (SOC2) 2017$10,000.00$833.33
28
NIST SP 1800-23: Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry$8,000.00$666.67
29
30
Customer Defined Custom Cybersecurity Program
31
Customer defined set of controls to reflect non-regulatory driven security programs appropriate for their specific needs (e.g. Cyber insurance, contracts, best practice). Controls applicable are NIST 800-53 or CIS v8$8,000.00$666.67
32
33
Harris Beach PLLC. Drafted NIST Control Family Policy Documents
34
21 board facing documents that define organization mission for each of the NIST control families as well as Exception Policy$2,500.00
35
36
37
** Requires license for use from ISO
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100