Everything membership includes, in one list

The resource library

The material an in-house IT department would build, if you had one.

• Policies: acceptable use, password and MFA, remote access, vendor and contractor access, incident response, backup and retention, mobile devices, removable media, change control. Written for a plant with contractors, shared logins on the floor and a 20-year-old HMI screen on a machine, not for a downtown office.
• Posters: printable, plant-legible, for the noticeboard and the break room. Phishing, tailgating, USB drives, reporting a near-miss on IT the way you'd report one on the floor.
• Toolbox talks: five-minute scripts a supervisor can read at shift start. One page, one topic, plain language, with two questions to ask the crew.
• Checklists: new-hire and departure access, month-end, pre-audit, backup verification, what to do in the first hour of an incident.
• Templates: asset register, vendor register, an incident log, a customer cyber-questionnaire response starter, a board-ready one-page IT summary.

Everything is editable and unbranded where it needs to be. Put your own logo on it, hand it to your auditor, and don't tell them where you got it. That's the point.

Browse what's live at the resource library.

Readiness

Your customers have started sending cyber questionnaires. Some of them now name a framework, usually NIST (a U.S. government cybersecurity framework) or ISO 27001 (an international information-security standard). The questionnaire is the new page in the supplier audit, and it is not going away.

You already know how this pattern works. It looks exactly like the audited safety certification you renew every year: a defined standard, a gap assessment, a corrective action plan, evidence, and a review.

Gap assessment tooling

Members get access to the readiness tooling that maps your current state against NIST or ISO controls and produces a gap list in plain language: what's missing, what it's for, and how heavy the lift is. Not a 200-page PDF. A list you can work through.

Annual re-assessment

Included with membership, so you can show movement year over year rather than a snapshot. Members of Both get it as part of the uplift.

We prepare you. We do not certify you

SafeIT is not a certification body and does not issue certificates. We get you ready for the review, and we sit with you through it. The certificate comes from the body that audits you.

More at NIST readiness.

Commercial terms

• Procurement pricing through Pax8. Member pricing on Microsoft 365, Azure and the rest of the cloud licensing you already buy, at our distribution rate rather than your list rate. Part of membership.
• Waived onboarding. New members do not pay the onboarding project fee. That fee is typically the biggest single number on a switching quote, and removing it is the point.
• Founding-member rate. Members who sign on early hold a founding rate on managed services for the life of the agreement.
• Cork coverage. Every SafeIT member is backed by warranty-backed cyber financial protection through Cork, active once onboarding brings your environment up to Cork's required security baseline. Members of Both get enhanced coverage. See Cork coverage.
• Priority SLA. Members of Both move to the priority response tier.

What membership costs, and how it is scoped

We are not going to publish a number that turns out to be wrong for your plant, and we are not going to make you sit through two meetings before you hear one.

The shape

Membership is scoped per plant, against three things: how many sites you run, how many people need supporting, and what coverage hours you actually need. A single-site operation running one shift is not priced like four sites running around the clock.

When you get the number

In the proposal, after the free assessment. The assessment is what makes the number honest: scoping an environment nobody has looked at produces a guess, and a guess gets revised upward later.

What is not extra

The advisors, the library, the policy customization, the training seats, the roundtable seats and Cork coverage are all part of membership. They are not add-ons and they do not appear as separate lines.

What is genuinely extra

Hardware and licensing, which we buy at Pax8 rates and pass through. Project work outside the agreed scope, a site build, a migration, an ERP cutover, quoted separately before it starts, never after.