Information security should speak to the business goals, be a secondary character to the organization’s story, and be able to communicate value to the organization, not itself – this is how information security is successful. This is Hollasec’s WHY, this is the core belief in our consulting services. To this end, Hollasec will aspire to facilitate this type of security culture throughout organization’s that we serve.

Hollasec will be available to support our clients:

• Hollasec will always keep the Client’s best interest as the core for strategy.
• Hollasec will be responsive and available.  
• Hollasec will be available at all hours but other than meetings will not hold specific hours “in the office”.
• Hollasec will work remotely when not in scheduled on-site meetings.
• Hollasec will provide guidance, advice, experience, and oversight for initiatives but will not formally certify compliance with any framework or compliance requirement.
• Hollasec will be available onsite as negotiated in the specific agreement. Additional onsite presence will be arranged as needed or requested by Client but may incur additional travel expenses.
• Onsite work must be scheduled in advance. Hollasec may be available to be scheduled onsite with less than twenty-four [24] hours notice, but this may incur additional travel cost.
• Onsite work will be flexible within reason (i.e. Client representation is out of the office or Hollasec representatives are out of town at a conference, and it is rescheduled for the following week).
• A representative will continue work, communication, and leadership remotely.
• Technologies such as conference calls, video discussions (slack meetings, signal video, web conferencing (Webex, GotoMeeting, Google Hangout), instant messaging (i.e. Signal, Slack, Teams), email, & SMS messaging will be used for constant communication.
• A Hollasec representative will strive to respond to email and phone inquiries within twenty-four [24] hours, and messages marked [URGENT] within four [4] hours between 7a and 10p.  This is not a guarantee of solution, but Hollasec will strive to at minimum acknowledge said messages.
• Urgent matters after 10p and before 7a require a phone call.  
• Hollasec will also have resources available remotely only due to specific events such as conferences, continuous education, speaking engagements, etc.  These vary year to year and Hollasec will work directly with Client as necessary. 

Hollasec will publish an annual Holiday calendar before November for the following year.  These holidays will be observed as non-work days by Hollasec.  Hollasec will be available remotely for emergencies during these times.  Example holidays may be but are not limited to:

• Christmas Eve through New Year’s Day (office closed)
• February 3^rd
• Good Friday
• Memorial Day
• Independence Day
• Labor Day
• Thanksgiving
• Day after Thanksgiving

Holidays that fall on a weekend will have a floating holiday either the business day before or after.

While Hollasec strives to provide the best advice and industry best practices, there is no guarantee of security.  Hollasec is not liable for any events related or not related to the security of systems, information, or infrastructure.  Client acknowledges that advice is provided in good faith.  Please see Hollasec TERMS & CONDITIONS for more details.  

If you have any questions, please reach out to your consultant directly or Consulting@Hollasec.com