Odeon Consulting Group
Get in touch

Cybersecurity & Compliance

Protect client data. Win the deals that ask for proof.

A staged path from a two-hour conversation to ISO 27001 or SOC 2 readiness — with every price published up front. Take only the stage you need; each one stands on its own.

Why it matters

Clients and procurement ask

Security questionnaires and certifications now gate enterprise and regulated deals.

Most breaches start in an inbox

Phishing and weak email controls remain the easiest way in.

Start small, build up

Each stage stands on its own; take only what you need, when you need it.

How we engage

Five stages, each with a published price range. We confirm a fixed quote after the discovery session.

  1. Discovery session

    SGD 1,500 2 hours

    We map your systems, client data flows, and obligations, and tell you plainly where you stand and what to do first.

    Credited in full against the Assessment & Roadmap.

  2. Assessment & roadmap

    SGD 18,000–28,000 3–4 weeks

    A full review of your security posture, ending in a prioritised, costed roadmap. Includes an email security review (SPF, DKIM, DMARC, mailbox controls) and a live phishing simulation, so the plan rests on evidence, not a questionnaire.

  3. Penetration testing

    SGD 6,000–12,000 per app Per application

    Hands-on testing of your client-facing web apps, APIs, and mobile apps (Android and iOS). AI agents widen coverage; every finding is verified by a person and comes with a working proof and a fix. We retest once you have patched.

    Retest included.

  4. Staff security training

    SGD 3,000–5,000 per workshop Half-day workshop

    Practical training on phishing and handling client data, built around the attacks your people actually receive. ISO 27001 requires security awareness training, so this work counts towards certification.

    Quarterly phishing simulations: SGD 1,500–2,500 each.

  5. ISO 27001 / SOC 2 readiness

    SGD 35,000–60,000 3–6 months

    We build the policies, controls, and evidence an auditor expects, run a mock audit, and stay with you through certification.

    Certification is performed and billed separately by an independent auditor.

Ranges depend on scope and exclude the independent auditor's certification fee.

Launching soon

A self-serve security platform

We're building a self-serve version of this work — pentests (web, API, and mobile), audit readiness, phishing drills, and data-exposure checks you run yourself, with our training and support behind you.

See it & join the waitlist

Not sure where to start?

Book the two-hour discovery session. It's credited against the roadmap if you continue.

Get in touch