The Core Package

The Core Package goes beyond basic preparedness. Here, we build full systems: an expanded Business Continuity Plan, a structured risk management plan, a cybersecurity checklist, deeper waste and social assessments, and a supplier scorecard. It gives you clarity, structure, and improved operational stability.

You receive a practical, small-business version of Enterprise Risk Management (ERM): a risk register, likelihood/impact scoring, mitigation steps, early warning indicators, and assigned risk owners. It helps you see issues before they disrupt operations.

It includes essential protections for small businesses: device security, password protocols, backup recommendations, access controls, and basic incident response steps. It’s designed to reduce the risk of downtime and data loss without requiring technical expertise.

You receive a Supplier Scorecard that rates performance, reliability, communication, capacity, and risk. This helps you identify vulnerable supplier relationships and builds a stronger, more reliable supply chain.

You’ll gain clear systems, better coordination, fewer disruptions, stronger team alignment, supplier clarity, reduced waste, smarter decision-making, and more confidence in your ability to manage business risks.

Your team participates in short workshops and simple check-ins. Most of the heavy lifting is done by me, with minimal extra work for your staff. The goal is to improve operations, not add stress.

No. Your time commitment is minimal: 2-hour kickoff, 1-2 hours for stakeholder interviews, three 60-90 minute monthly check-ins, and a 1-hour team training. Total: ~8-10 hours over 3-4 months. I do 40-60 hours of analysis and building systems. You're not pulling employees off the floor; you give me insights, I build the systems, then we implement gradually using the roadmap.

Slightly, but I don't recommend it. The deliverables are designed to build on each other - risk register informs continuity plan, continuity connects to crisis communication, supplier scorecards feed into risk register. If you skip components, you get gaps. That said, if you already have a solid continuity plan, we can review and integrate it rather than start from scratch. Let's discuss on a discovery call what you've done and what's most urgent.

Yes, you own everything. All deliverables are yours in editable formats (Word/Google Docs, Excel/Sheets), not locked PDFs. You can update and maintain these systems as your business changes forever. The only thing you don't keep? Me. After 3 months, ongoing support is optional (book check-ins, upgrade to Master, or work independently).

Life happens. Short pause (2-4 weeks): No problem, we pick back up where we left off. Longer pause (1-3 months): We do a quick recap call when we restart. Extended pause (3+ months): Let's discuss whether to continue with adjusted scope, pause indefinitely, or wrap up what we've done (partial refund if needed). The key: Just communicate with me, don't ghost.