Published, in full

What our operational resilience services cost

Our services with the fees printed on them: gap analysis, framework build, scenario testing and SWIFT CSP assessment, each fixed and published before you speak to anyone. Programmes are quoted, and we show the arithmetic.

The core services

Three fixed-fee services, priced before you call

Resilience Gap Analysis

Your resilience measured against recognised frameworks

£8,990 to £16,780

one-off, fixed by scope, ex VAT

  • Assessed against ISO 22301, DORA, NIST and the FCA and PRA regimes
  • Documents, evidence and self-assessment reviewed critically
  • Interviews with the people who own your important services
  • Gap report, finding by finding, with fixes
  • Board summary and debrief call
What this service covers

Most booked

Resilience Framework

BIAs run, continuity and recovery plans built

From £17,500

per engagement, ex VAT

  • Business impact analyses across your important services
  • Business continuity plans written with the service owners
  • IT disaster recovery plans engineered with your teams
  • Impact tolerances documented with their rationale
  • An operating rhythm so the framework stays alive
What this service covers

Scenario Testing Exercise

A severe-but-plausible tabletop, evidenced

£8,550 to £13,200

one-off, fixed by scope, ex VAT

  • Scenario designed from your services and tolerances
  • Facilitated exercise with timed injects
  • Evidence pack for supervisors and auditors
  • Findings and vulnerabilities register
  • Lessons wired back into your framework
What this service covers

SWIFT CSP assessment

Architecture B

No local SWIFT infrastructure footprint

£4,950

fixed fee, ex VAT

The independent assessment CSCF v2026 requires, scoped to the mandatory controls that apply to a B-type footprint, with an attestation-ready report at the end.

SWIFT CSP assessment

Architectures A1 to A4

Local interfaces, connectors or infrastructure

£8,950

per architecture, ex VAT

Full-scope assessment across every mandatory control for your architecture type, including the Control 2.4 requirement that became mandatory in v2026.

The starting point

Rapid Resilience Review

A structured questionnaire, a consultant's scored read of your resilience position and the three fixes that matter first. The fee is credited in full against a Resilience Gap Analysis booked within three months.

£1,995 ex VAT, credited later

The whole machine

Full Resilience Programme

End-to-end programme design and delivery for firms that need the whole machine built or rebuilt. Quoted following scoping by regulatory footprint and number of important business services, using the same arithmetic our published fees show.

From £24,950 ex VAT, quoted following scoping

Assumptions, stated plainly

Fees exclude VAT and include scoping, the engagement, the deliverables and a debrief. Facilitated sessions can run on your site or remotely. Group structures, multiple regulated entities and unusually large service inventories move a service into quoted territory, and we tell you that at scoping rather than after. Regulated-scheme testing (CBEST, STAR-FS) is delivered by accredited providers; our role there is readiness and scoping.

For comparison

What this work costs across the market

Exactly one UK operational resilience consultancy publishes its prices, listing diagnostic assessments between £15,000 and £25,000 by tier; everyone else quotes. On the government's Digital Marketplace, resilience consultancy day rates run from £595 to £1,575.

No UK firm publishes a price for a self-assessment review, an impact tolerance workshop, a scenario exercise or a SWIFT CSP assessment. These fees are, as far as we can establish, the first. That is a statement about the market, not about us.

Asked about the fees

Pricing, explained further

Why publish fees in a market that quotes?

Because bounded work has a knowable cost, and hiding it mostly serves the seller. A gap analysis, a framework build and a tabletop exercise are well-understood engagements: we price them, publish the figures and hold them. Every CyPro specialist service runs the same policy.

What decides where a fee lands within its range?

Scope, agreed before work starts: how many important services are in play, how many frameworks you need measuring against, and how much documentation already exists. The figure is fixed at the scoping call and does not move afterwards.

What exactly is the Rapid Resilience Review?

A short, scored look at your resilience position: you complete a structured questionnaire, a consultant reviews it and returns a scored summary with the three things to fix first. It costs £1,995 and is credited in full against a Resilience Gap Analysis booked within three months, so trying us costs nothing extra.

Why is SWIFT CSP priced by architecture type?

Because SWIFT's own framework scopes the work that way: your architecture type determines which controls are in scope for assessment. A connector-less Architecture B footprint is a genuinely smaller exercise than a full A1 stack, and the published fees reflect that rather than averaging it away.

The SWIFT CSP assessment

What does the Full Resilience Programme cost?

From £24,950, quoted following scoping, because programme scope varies with your regulatory footprint and the number of important business services. The quote is built from the same arithmetic as the published services, so you can check our workings against this page.

Rocket above the Operational Resilience UK call to action

The fee is already public

Match a service to your gap in one call

One short call establishes which service fits your position, and the engagement books at the fee this page already shows. Negotiation is not part of the process.