Focused assessment
Suitable for an initial security review, audit preparation, energy baseline or architecture assessment. The proposal names the systems or sites in scope, work method, client access requirements, reporting deliverables, exclusions, schedule and acceptance review. Commercial format: bounded statement of work and agreed fixed fee where the scope permits.
Technical evaluation or pilot
Suitable for DeepShield, Deep Advisor, smart metering, critical infrastructure or integration programmes. A pilot charter defines permitted connections, data sources, objective success measures, rollback responsibilities, site availability and decision milestones. Commercial format: pilot quotation with equipment, specialist days, travel and integration items itemized.
Implementation project
Suitable for migration, OT segmentation, sovereign infrastructure, remediation and multi-site delivery. Purchasing receives a milestone plan, named deliverables, dependencies, implementation responsibility matrix, equipment list if applicable and acceptance checkpoints. Commercial format: phases or milestones linked to the chosen scope.
Managed service
Suitable for continuing monitoring, infrastructure operations, recurring vulnerability assessment and engineering support. The offer specifies the covered assets and hours, named service responsibilities, escalation, reporting frequency, exclusions and renewal terms. Commercial format: recurring service schedule for agreed coverage.
How to compare quotations
Compare the same five cost drivers: (1) sites, critical systems and data sources; (2) engineering, integration and testing effort; (3) hardware, licensing and hosting where used; (4) operating coverage and response model; (5) training, documentation, handover and exit. Deep InfoSec can provide a line-item commercial proposal from the project brief.