Mike Hancock, founder

01 Founder note

Built by someone who sat where you sit.

I spent about 20 years in network security inside regulated banks, moving from firewall engineering into senior security roles at regional institutions. I hold the CISSP and CCSP certifications. Every year of that career ran inside an examined environment: vendor reviews, board reporting, and documentation built to survive an examiner's questions.

I built this kit the way I built internal assessments for years: structured, scored, and written for the people who have to sign off. It does not assume an institution ready to buy software. It assumes an institution that needs a straight answer before the meeting where someone asks for one.

You should be skeptical of unknown vendors. I would be. The methodology below is published in full, not summarized. Sample pages sit on every product page. The fact sheet on this page answers what a vendor review would ask before I ask you to trust the rest.

02 Published methodology

Ten readiness dimensions, published in full.

The assessment scores your institution across ten dimensions. Each one maps to a track of interview questions and a section of the scoring workbook. Nothing about the scoring model sits behind a purchase.

  • Strategy
  • Ownership and Accountability
  • Governance and Policy
  • Risk Management
  • Data Readiness
  • Technology and Operations
  • Vendor and Third-Party
  • People and Skills
  • Board and Leadership Readiness
  • Monitoring and Documentation

03 Scope

What this kit does not claim to do.

The assessment identifies where your institution stands today. It does not decide what your institution should do next, and it does not speak for a regulator.

  • It is not a compliance certification. No score from this kit satisfies an examiner on its own.
  • It is not legal advice. A licensed attorney reviews any policy before your board adopts it.
  • It is not a consulting engagement. Nobody from this company interviews your staff or writes your report for you.
  • It is not a software product. There is nothing to install and nothing that scores you automatically.

04 Vendor fact sheet

What your vendor review would ask.

Legal entity: .

A W-9 is available on request.

The product is a set of static files: documents, spreadsheets, and templates delivered by download link. Nothing phones home. The kit collects no institution data, because no part of the assessment runs on our servers or touches your network.

Questions your review process needs answered that are not covered here go to .

05 How we priced this

Three ways to answer the board's question, and what each one costs.

Three kinds of vendor answer this question today.

  • Free vendor checklists. Free, and built to open a sales call.
  • AI readiness tools. Typically bundled with software the vendor sells you next.
  • Bank-specific consulting discovery. $10,000 to $150,000, billed whether or not you already know the answer.

This kit sits between the first two and the third: $299 for the Assessment Kit, $799 at the founding price for the Assessment plus Board Kit. One purchase, no subscription, no sales call.