Run NIST CSF 2.0 across every engagement from one deck — computed coverage per client, scored risk, and the deliverables that close engagements: Board Reports, client-ready Hand-Offs, and Cyber-Insurance Evidence Packs. When procurement, the insurer, or the auditor asks for proof, the answer is a printed sheet — not a week of spreadsheet archaeology. Team seats and MSAs built for portfolios, not single seats.
Run multiple environments side by side — each client’s data isolated in its own private local database.
2–10 named seats, the discount deepening with every seat added — no floating licenses, no rent. Above 10 seats, or any MSP-wide / multi-tenant / white-label use: a signed MSA.
Continuity commitment and ownership posture that survive a vendor-risk review.
