Pricing

Citicus ONE can be used to evaluate anything from one to many thousands of assets, entities, processes and/or activities (collectively, these are called 'targets of evaluation').  Thus our risk and compliance management software is highly scalable.

The price you pay to deploy it depends on:

• the number of targets of evaluation you wish to evaluate
• how many of them are to have only their criticality assessed and how many may be subject to a full risk assessment
• your chosen method of deployment (eg an in-house installation on a server accessible via your corporate intranet, use via our premium or basic hosted service, or a laptop implementation)
• whether you wish to deploy a control framework that is available at extra cost
• any discounts that apply (for example, a discount is available if your organisation is a member of the Information Security Forum)
• contracts employed (our prices assume our standard agreements apply for software, maintenance and hosting services).

This pricing model positively supports a continuing risk and compliance management process ie each in-scope target of evaluation may be subject to as many evaluations as are needed over time at no extra cost.

As shown below, it also facilitates and rewards enterprise-wide deployments since the more targets of evaluation you wish to include in your risk programme, the lower the unit price per individual target of evaluation. 

The low-point on the price curves is used to calculate the price of an unrestricted Enterprise licence, which clearly provides the best 'bang per buck'.

Although large-scale deployments offers the best value, our flexible pricing model enables you to start with a small-scale implementation (eg using our basic hosting service) and to expand it progressively and / or vary its method of deployment.

For example, a  low-cost pilot might involve evaluating the criticality of, say, 25 targets of evaluation (eg business applications, sites, processes) and then conducting full risk evaluations of, say, the five most critical ones.  Using our hosted service, such a pilot can be conducted at modest cost.  Subject to agreement, the initial cost can then be credited against the price of a subsequent large-scale deployment.  This approach enables you to start small and grow your deployment over time.

Further information

Further information is available in our topic paper entitled Citicus ONE availability and pricing (PDF 62KB). Contact Citicus or one of our Implementation partners for a specific quotation.