Docket

Pick the framework, size the engagement, and price the full audit cycle — not just year one.

SOC 2 Type II

ISO 27001

PCI DSS

HIPAA

GDPR

Custom

Currency

Organization size

Additional in-scope locations (beyond HQ)

Days added per additional location

Real audit cycles vary by regulator and scope — the days below are editable starting estimates, not a quote.

01 Auditor fees

Initial / certification audit days

Surveillance / renewal audit days (per year)

Auditor day rate

Travel & logistics (one-time, year 1)

Internal staff hours for audit support (year 1)

Internal hourly rate

Certification / registration fee (one-time)

Remediation budget (one-time, findings fixes)

Year 1

Initial audit

— days

—

Year 2

Surveillance

— days

—

Year 3

Surveillance / renewal

— days

—

Year 1 total

—

Audit fee, travel, internal time, cert & remediation.

Avg. annual (years 2–3)

—

Typical ongoing surveillance year.

3-year program total

—

Full initial + surveillance cycle.

Copied to clipboard