Engagement Scoping — Workpaper 001

Compliance Readiness & Engagement Scope

SOC 2 · ISO/IEC 27001 · HIPAA — intake infrastructure and client requirements once, and the control effort, engagement scope, and cost recompute as you go. Add penetration testing as a standalone line item. This engagement is governed by the Master Service Agreement (MSA) and subject to the Mutual Non-Disclosure Agreement (MNDA) between Beskar and the client — see the Statement of Work tab.

01

Client & Infrastructure Intake

02

Framework & Scope Selection

SOC 2

Additional Trust Services Criteria (beyond Security):

ISO/IEC 27001:2022

Covers Clauses 4–10 (management system) and Annex A control themes (Organizational, People, Physical, Technological).

HIPAA

GDPR

EU/EEA data subjects — lawful basis, data subject rights, DPIAs, cross-border transfer mechanisms.

CCPA / CPRA

California consumer rights, notice at collection, opt-out and service-provider agreements.

DPDPA (India)

Consent Manager integration, Data Principal rights, Significant Data Fiduciary obligations.

Note: Client indicates no PHI is handled — confirm HIPAA applicability before scoping this framework.
03

Requirements & Implementation Effort

Set current control maturity for each domain — effort and cost recompute automatically. Domains that cover the same underlying control across frameworks (access control, risk assessment, monitoring, etc.) get a credit after the first framework.

04

Add-On: Penetration Testing (VAPT)

05

Add-On: Cloud Security Posture Management (CSPM)

06

Scope of Engagement — Summary

View ledger — $0 ▲
Statement of Work — Governed by the MSA & MNDA

Statement of Work

This SOW references and incorporates the Master Service Agreement (MSA) and Mutual Non-Disclosure Agreement (MNDA) between Beskar and the Customer. Fill in client and signatory details once below — the SOW text, and the MNDA/MSA documents themselves, update from the same data.

00

Governing Documents

This SOW is entered into pursuant to, and incorporated by reference into, the MSA, and is subject to the MNDA. Record each agreement's execution details here — they are referenced automatically in Section 02 below.

Master Service Agreement (MSA)

Pending
Reference: MSA between Beskar Private Limited and the Customer, as defined in Section 01.

Mutual NDA (MNDA)

Pending
Reference: MNDA between Beskar Private Limited and the Customer, as defined in Section 01.
01

Client & Signatory Details

Enter once — these values populate the SOW text below, the governing-document references above, and the generated MNDA/MSA files in Section 04.

01b

Beskar Private Limited — Signatory

Beskar's signature block for the MNDA and MSA (preview, print and .docx). Leave blank to keep a line for wet or e-signature.

02

Statement of Work — Document Preview

Live preview. Filled fields appear in brass; anything still blank is flagged in red so nothing ships unnoticed.

03

Scope & Deliverables

Summarize the engagement scope here, or copy totals in from the companion Engagement Scoping & Cost workpaper.

WorkstreamDeliverableTarget DateOwner
04

Generate Governing Documents

Fills the MSA and MNDA templates — bundled into this file — with the client and signatory details from Section 01 (and execution details from Section 00), producing ready-to-sign .docx files entirely in your browser; nothing is uploaded anywhere. Beskar's own internal signatory fields are left blank for your team to complete.

Mutual NDA (MNDA)

Fills client entity, jurisdiction, address, notices contact/email and signatory into the MNDA template.

Master Service Agreement (MSA)

Fills client entity, jurisdiction, address, execution place/date and signatory into the MSA template.

Progress — 0%▲
Scoping Intake — Master Questionnaire

Compliance Scoping Questionnaire

One intake form for organization, infrastructure and data-scope questions common to every framework, plus a dedicated block per framework you're scoping — SOC 2, ISO/IEC 27001, HIPAA, GDPR, CCPA/CPRA, DPDPA and others.

00

Framework(s) In Scope

Select every framework this engagement covers. Sections 01–03 apply to all of them; Section 04 adds one block per framework selected.

04

Framework-Specific Questions

05

Completed Questionnaire — Summary

Progress — 0%▲
Billing — Issued under the MSA & SOW

Invoice

Bill-to details come from the Statement of Work tab. Add line items by hand or import the totals from the Engagement Scoping & Cost ledger, then print a clean one-document PDF.

01

Invoice Details

02

Line Items

DescriptionQtyUnit price
03

Invoice Preview

Governing Document

Mutual Non-Disclosure Agreement

Full agreement text, filled live from the Client & Signatory Details on the Statement of Work tab. Print a clean PDF, or download the editable Word file.

Governing Document

Master Service Agreement

Full agreement text, filled live from the Statement of Work tab (client details, execution place and date, signatory). Print a clean PDF, or download the editable Word file.