Discover

.jpeg)
Dear Nicola,
Thank you for the opportunity to provide Serko with a proposal for FACT24 CIM Starter.
Serko has identified the need to conduct activities to ensure the appropriate level of preparedness in the event of a business disruption.
This includes the following elements:
FACT24 Setup Package
FACT24 CIM Starter
A fit-for-purpose FACT24 CIM program, built on clear recovery priorities, dependencies, and strong stakeholder engagement, will increase confidence in Serko response capabilities and meet stakeholder expectations. It will also ensure your organisation begins its journey toward building resilience maturity in a challenging world.
In the following sections, you'll find our approach to running your program and how Fixinc enhances people's capabilities during times of adversity. The document outlines our scope, outputs, references, company information, FAQs, and additional details you may find valuable. But if there is anything missing, please let me know and I will send it over promptly.
Fixinc is a boutique, people-first advisory. We keep our client relationships and team structure intentionally streamlined, allowing our senior advisors to dedicate unparalleled commitment and attention to your program.
Clients experience a tailored, personal relationship with us. All activities and services are performed to ISO-level standards and supported by our intelligent in-house technology solutions, which enhance efficiency and implementation tenfold. This is why we're widely regarded as some of the most reliable and dedicated resilience advisors throughout Oceania and the ASEAN region.
Fixinc has extensive experience working within the Information Technology & Software sector. We have a deep understanding of the unique risks and threat landscape Serko navigates daily. Our services are specifically designed to address Information Technology & Software risks.
Nicola, at Fixinc, we stake our careers and reputation on the excellence of our services. I hope this proposal provides insight into the quality we strive to achieve, and that you are confident robust measures will be in place to address any business disruptions Serko is likely to face.
On behalf of the Fixinc team, thank you for this opportunity and we look forward to working with you and the wider Serko team soon.
Yours sincerely,
Brad

01.
Review proposal scope
02.
determine investment
We will refine and present an amount that ensures you get to where you're going, on budget.
03.
engagement meeting
A 45 to 60 minute discussion to refine the implementation plan and onboarding.
04.
program initiation
05.
maintenance
As the program draws to a close, we will discuss how we keep the momentum going.

FACT24 ENS+ is a flexible emergency notification system that allows you to manage alarms through multiple platforms, ensuring comprehensive control in critical situations.
FACT24 CIM Starter Setup Steps:
Initial Configuration:
Access the FACT24 CIM Starter web portal and configure the default alarm settings, including recipients, alarm types, and notification channels.
Define scenarios for different emergency types, ensuring that each scenario is tailored to specific needs and response protocols.
User Roles and Permissions:
Assign roles and permissions for team members, specifying who can create, modify, or trigger alarms.
Set up advanced permissions if required, such as granting specific users rights to trigger alarms directly from the PC client (available as an additional feature).
Platform Integration:
Mobile App: Ensure all relevant team members download the FACT24 CIM Starter app, where they can activate alarms and receive notifications on the go.
PC Client: For organizations using the PC client, ensure it’s installed on users’ desktops, and provide login credentials.
Real-Time Monitoring Setup:
Configure the dashboard for real-time tracking of alarms and notifications, ensuring that users can easily monitor the status of active alarms and recipient responses.
Schedule Alarms:
Set up scheduled alarms for recurring notifications, such as periodic testing or drills, to ensure regular system checks and preparedness.
FACT24 CIM StarterTraining:
The Training sessions for FFACT24 CIM Starter will focus on familiarizing the team with the system's diverse alarm activation methods. Team members will learn how to:

In critical situations structure and an overview are crucial. With FACT24 CIM, all information is combined in one workspace. This is your digital crisis space, available anywhere and at any time. Everything you know from the physical crisis space is also available virtually – with the decisive advantage that information flows even faster and you can work completely independently of location.
Phase 2: FACT24 CIM Starter
FILE ARCHIVE
Files and documentation can be saved and managed in individual folders in the File Archive, including version control. ALL of your plans are located in ONE place and can also be accessed if your own IT environment is not available. The File Archive contains storage space of 20 GB.
PRE-DEFINED ACTION CARDS
Use Action Cards to carry out your plans! Action Cards are predefined checklists that are automatically activated when registering the incident, depending on the role, type of incident and severity.
REPORT TEMPLATES
Customisable templates and forms can be used to log every type of meeting and to create reports (e.g. Situation Report). FACT24 CIM is delivered standard with best practices templates.
EXERCISE MODE
Do training about the emergency with the Exercise Mode so that all key personnel can familiarise themselves with the tool as well as a possible procedure. The Exercise Mode also has the advantage that this type of test area is separated from normal mode.
REGISTRATION OF INCIDENTS
Register new incidents with description, classification regarding type, phase and severity, as well as appendices. Additional custom fields can be added. Access can be restricted based on roles or users. All the follow-up information entered in the system is associated with an incident.
AUTOMATIC INCIDENT CREATION VIA API
Thanks to API connection, incidents can be created automatically on the basis of previously defined events. Existing incidents can also be updated - regardless of whether they were created manually or via import. With the help of our detailed API documentation you can connect your required applications and thus react even faster to incidents.
AUTOMATIC RUNNING LOG
Registration of an incident automatically starts continuous logging. All information, decisions and actions are entered automatically. The documentation can be exported as an audit-proof PDF file.
ACTION CARDS
In a crisis, you can benefit from prepared checklists in the form of Action Cards that you can follow for orientation. Action Cards are automatically activated depending on the role, type of incident and severity. Actions can be marked as completed, commented on, or assigned as a task.
AUDIT-PROOF RUNNING LOG
The detailed log of each incident can be downloaded as an audit-proof PDF file and provides an overview of all actions and decisions.
The Fixinc Maintenance Program is a 3-year partnership designed to build resilience maturity, blending expert advisory, smart technology, and structured momentum so your business can prepare, respond, and thrive through disruption. This program is a way to maintain momentum with very little resource allocation.

This program ensures a business can survive through any disruption by modernising plans, introducing practical software, and building a culture of resilience; all done under budget and on time.
The Maintenance Program follows the best practice guidelines of the Business Continuity Institute (BCI) and all core components of the ISO 22301:2019 standards at a fraction of the cost and resource of traditional programs. We're showcasing this now on the off-chance you wish to continue to work with Fixinc for the longhaul. This program will save you significant budget and maintain momentum.
We will plan and schedule the deliverables through a comprehensive engagement workshop featuring Fixinc and your program stakeholders.

We will conduct in-person, on-site reviews and checks, utilising threat intelligence to stay relevant and ensure nothing has developed over the last few months.

We will validate everything in place across the entire organisation. We will practice, build confidence in your team, and evolve a culture of resilience.

At this point, we would have completed all components in your Maintenance Program. If any disruptions have occured, we will debrief these. If any changes to the organisation have occured, we will plan accordingly.




.jpg)

388 George St, Sydney
Our founding AU location is based on the world famous George Street. The majority of our programs and clients are Australian based, we frequent the city often and have major projects in Brisbane, Adelaide, and Melbourne.
Health Technology Centre, The Arts Centre, 2 Worcester Boulevard, Christchurch 8013
Our founding location and New Zealand head office. Christchurch is where our journey began, and where strategy, innovation, and leadership converge. Surrounded by great cafes and centrally located, pop in to see us any time.
Level 9, Tower B, 5, Jalan Bangsar Utama 1, Bangsar, Kuala Lumpur
Our founding Malaysian location is based in the popular bustling region of Bangsar. It's out of this modern office we service our entire Malaysian client base.
Level 9, Tower B, 5, Jalan Bangsar Utama 1, Bangsar, Kuala Lumpur
Our founding Malaysian location is based in the popular bustling region of Bangsar. It's out of this modern office we service our entire Malaysian client base.
Level 9, Tower B, 5, Jalan Bangsar Utama 1, Bangsar, Kuala Lumpur
Our founding Malaysian location is based in the popular bustling region of Bangsar. It's out of this modern office we service our entire Malaysian client base.
Level 9, Tower B, 5, Jalan Bangsar Utama 1, Bangsar, Kuala Lumpur
Our founding Malaysian location is based in the popular bustling region of Bangsar. It's out of this modern office we service our entire Malaysian client base.
Level 9, Tower B, 5, Jalan Bangsar Utama 1, Bangsar, Kuala Lumpur
Our founding Malaysian location is based in the popular bustling region of Bangsar. It's out of this modern office we service our entire Malaysian client base.
Mon - FRI 9 A.M. - 8 P.M.
Our team is based across GMT+13, GMT+10:30, and GMT+8. We are generally available 7 days a week. You are welcome to text or call us via WhatsApp from anywhere in the world.
Use the form below to contact us about this proposal
to renew this proposal, simply send us a message and we will reach out.
Fixinc Team
All Fixinc programs follow their relevant ISO standard framework. This ensures clients are recieving the most reliable and universaly adopted program available. In addition, Fixinc offers a range of accreditations and credentials from our Advisors. As a result, our passionate client base can vouch for the quality of work we provide. These are listed below.

Fixinc Credentials
ISO 22301:2019 - BCM Systems
Fixinc follows the Societal security – Business Continuity Management Systems - Requirements, ensuring all programs meet future compliance.
Business Continuity Best Practice Guidelines
All of our Business Continuity solutions follow the Business Continuity Institute's Best Practice Guidelines; regularly updated and modernised.
ISO 31000 Risk Management
We refer to the principals and guidelines of this standard in program deliverables and threat intelligence analysis.
BS11200:2014, Crisis Management
All relevant programs will include best crisis management principals and guidelines as proposed by this standard.
AS: 3745 Planning for Emergencies in Facilities
Fixinc has experience and frameworks to achieve this standard for relevant Australian businesses.
CIMS Third Edition
Unique to New Zealand, Fixinc can train out the Critical Incident Management System framework (a valuable workshop regardless of your intentions to certify).
ISO 27001 - ISMS
Relevant technology solutions are delivered in alignment with the standard, embedding certified information security management practices directly into the services we provide.
team experience
MBCI
A professional grade from the Business Continuity Institute indicating comprehensive competency in business continuity and resilience, granted to individuals who have passed the CBCI exam and demonstrated mastery in several core competency areas, with annual CPD renewal required.
NV1: Negative Vetting Level 1
An Australian government security clearance (up to SECRET level) requiring AGSVA vetting of integrity and trustworthiness, essential for defense, national security, and other sensitive roles, with detailed background checks and ongoing reporting.
NZ ISM and Cloud Risk
Expertise in applying New Zealand’s Information Security Manual (ISM) and cloud risk management frameworks to ensure systems and services align with national security and compliance requirements.
Australian Essential 8 and IRAP
Proficiency in the Australian Cyber Security Centre’s Essential Eight mitigation strategies and the IRAP (Information Security Registered Assessors Program) process for assessing and certifying systems handling government data.
ISO 27001
Certified capability in implementing and managing Information Security Management Systems (ISMS) under the ISO 27001 international standard, ensuring confidentiality, integrity, and availability of information assets.
SOC 2
Experience in achieving and maintaining SOC 2 compliance, demonstrating robust controls over security, availability, processing integrity, confidentiality, and privacy in technology and service operations.
Qualified CIMS Trainer
Our advisors provide training in New Zealand’s Coordinated Incident Management System, equipping businesses to coordinate effectively and respond confidently to disruptions.
ISO 22301 Support
Our advisors help organisations design and implement the framework needed to achieve Business Continuity accreditation, guiding preparation and supporting ongoing compliance and maintenance over a three-year cycle.
Clint referrals

the why
Short Pay is offered to only a select few and is valid for the first program you run with Fixinc. This is our way of reducing risk and concern you may have when outsourcing your resilience program. We understand the significane of this, so it's our small way to reduce any friction.
the how
Once a program finishes, we will have a post-program review with you to close off the final milestone. In this meeting, we will check that we have met your expectations and accurately covered the scope of work. It's here you can raise any concerns and Short Pay can be activated.
the what
Within our terms, you can discuss with us what didn't go as expected and where we could have improved. We calculate this into a monetary value and take it off your final invoice with us. Or, you can exchange it for Loyalty Points if your business is eligble.
Your loyalty and commitment to us should be rewarded. That's why every program or activity you do with Fixinc earns you points that goes towards money off your next program, or access to complimentary work, like an exercise or review.

Your loyalty and commitment to us should be rewarded. That's why every program or activity you do with Fixinc earns you points that goes towards money off your next program, or access to complimentary work, like an exercise or review.

loyalty program
loyalty program
Our programs can start within the day of signing your proposal (schedules permitting). However, we like to have our Program Engagement Meeting at least within 7 days. If it's a smaller program and more urgent, we can look to start within 48 hours.
Specific program terms are found in the T&Cs linked below in the meta area. In most cases, we ask for an engagement fee to be settled within 14 days of signing this program's proposal (usually 30%). However, we can be flexible with payment terms that follow your procurement policy. All we ask is that this is shared after accepting this proposal and before the engagement meeting so we can plan accordingly.
To streamline the process, you will get a link to share procurement information with us after signing. This allows you to share your Accounts information so we can connect directly with them.
It's much less than you might think. Our team is able to do a lot of the heavy lifting for you. On occasion, we may need staff for meetings (like with BIAs), however this never usually goes over an hour. Training sessions require a little more input, but are still very reasonable (a few hours in total). We specifically make a point of reducing the time and resources from your team as this is commonly the biggest reservations for starting a program.
This often depends on the program itself. We want to ensure additional work does not disrupt the momentum of your current program. However, we can run programs alongside one another, or provide a separate scope and quote to start something immediately once this is finished. Speak to us about our Maintenance Program as this can cover multiple programs in one.
You can find specific clauses in your terms regarding our policy, however we aim to be as flexible as possible to our clients; things happen, we understand. In most cases, it's simply 30-days notice with the Engagement Fee acting as a non-refundable deposit. Instead of cancelling, you can also put programs on hold if necessary. This pauses all work and future invoices until you're ready to revisit.
Quote
Scope
Authorised signature
FACT24 CIM Starter T&C's
Download