Security Questionnaire Response and Certification Support — Long Form (Counterparty Side)
A long-form, counterparty-favorable Security Questionnaire Response and Certification Support that answers customer security questionnaires accurately, because a wrong answer becomes a misrepresentation claim.
Every allocation of risk is made deliberately in your favor, with the reasoning noted for the negotiation. The complete provision set for a business whose exposure justifies covering every case.
Frequently asked questions
The fee covers the finished document, filing-ready or send-ready as applicable, the supporting exhibits or attachments described in the scope, and a short cover memorandum explaining the choices made. It is fixed at this scope: up to 3 questionnaires. 2 rounds of revisions are included. If your matter falls outside that scope we tell you before starting and quote the difference — we do not bill past a flat fee without agreeing it first.
1 to 2 weeks from a complete set of instructions, plus time for the 2 rounds of revisions included in the fee. If you are working to a court deadline or a closing date, tell us when you order and we will confirm in writing whether we can meet it before you commit.
$3,425 is $325/hour × 10.5 hours — the time this deliverable takes in an ordinary security matter, at the firm's standard rate. Because it is a flat fee, the risk of the work running long sits with the firm: you pay $3,425 whether it takes us the estimate or twice it.
Third-party costs are never inside a flat fee and are passed through at cost, never marked up: court and agency filing fees, court reporter and transcript charges, expert witness fees, search vendor and e-discovery hosting charges, process server fees, and travel.
What your business does, and who its users or customers are, the systems, vendors, and data flows the document has to describe accurately, any existing version, and what prompted this one, and any regulator, platform, or contract requirement you are working to. Send what you have — if something is missing we will tell you what else we need before the turnaround clock starts.
Clients also order
Other Security work MC Law prepares on a flat fee.
Security Questionnaire Response and Certification Support — Long Form (Company Side)
A comprehensive Security Questionnaire Response and Certification Support drafted from the company position, covering the agreement that answers customer security questionnaires accurately, because a wrong answer becomes a misrepresentation claim.
Vulnerability Disclosure and Bug Bounty Program Terms — Template and Playbook
A reusable Vulnerability Disclosure and Bug Bounty Program Terms template plus a negotiation playbook, for the document that invites researchers to report flaws with a safe harbor clear enough that they will actually use it.
Penetration Testing and Security Assessment Agreement (Long Form)
A long-form Penetration Testing and Security Assessment Agreement that authorizes security testing with a scope, safe harbor, and disclosure terms that protect both sides, built for a high-value or heavily negotiated transaction.
Vulnerability Disclosure and Bug Bounty Program Terms (Long Form)
A comprehensive Vulnerability Disclosure and Bug Bounty Program Terms that invites researchers to report flaws with a safe harbor clear enough that they will actually use it, with the full set of protective provisions a significant deal deserves.
Data Breach Notification Package
A custom-drafted Data Breach Notification Package that prepares the individual, regulator, and media notices a breach triggers, on the clock the statutes impose.
Security Questionnaire Response and Certification Support (Long Form)
A detailed Security Questionnaire Response and Certification Support that answers customer security questionnaires accurately, because a wrong answer becomes a misrepresentation claim, covering the edge cases short forms leave open.