Step 06 · $8,500 / month
Continuous Assurance Retainer
For organizations that already have a QCI-QS1 record and need it kept current each quarter. 12-month renewable term.
What it covers
Ongoing custody of the standard inside your organization: quarterly Q-Risk reassessment, supplier attestation tracking, and timing guidance as NIST and regulatory deadlines move. Delivered under the QCI-M1 Migration Governance Method: each of the thirteen Annex G cryptographic domains reported by stage and gate status each quarter, with the obligations register reviewed quarterly and supplier attestations refreshed annually.
You receive
- Quarterly reassessment with trended Q-Risk Score and board insert
- Supplier attestation register maintained against QCI-QS1
- Standing advisory access for sequencing and defer or accelerate decisions
When it fits
After the Readiness Program or Transformation, or when your own team built the record and wants it maintained. Without a record, start with Readiness.
Independence
Quarterly reassessments under the retainer are self-assessments prepared with QCI. Independent assessment of work QCI helped build or maintain is by an assessor outside QCI (see Independence policy).
Terms
Invoiced monthly, Net 30. Vendor onboarding documents are on the procurement page.