Consulting Policies

Working terms for OSS security consulting engagements.

Effective date: August 3, 2026

Published service descriptions and prices remain the starting point. A quote, proposal, statement of work, or signed agreement controls the exact scope, price, schedule, deliverables, and payment terms for a specific engagement.

Scope and pricing

Consulting is limited to the work described in the applicable published offering or approved written scope. Work outside that scope requires approval and may change the price or schedule. A quote is valid for the period stated in the quote. Deposits, retainers, milestones, and final payments are due according to the applicable invoice or agreement.

Travel, lodging, special equipment, third-party services, printing, permits, and other project costs are included only when expressly stated.

Client responsibilities

The client must provide timely access, accurate and complete information, a safe work environment, and an authorized point of contact. The client is responsible for identifying access restrictions, sensitive areas, legal requirements, leases, policies, insurer requirements, and other limitations that may affect the work.

Delays caused by unavailable sites, incomplete information, unsafe conditions, weather, third parties, or client-requested changes may require rescheduling or a revised scope.

Changes, cancellations, and rescheduling

Changes to dates, locations, deliverables, or scope require mutual approval and may change the price or schedule. Cancellation, deposit, travel, and refund terms stated in a proposal or agreement control.

Unless a project document states otherwise, payments are applied to completed work, scheduled work, approved travel, materials, and other agreed costs. If a client cancels before work begins, OSS will refund any unearned amount after deducting completed work and documented nonrecoverable costs. If a client cancels after work begins, completed work and approved expenses remain payable.

Deliverables and use

Reports, plans, layouts, procedures, and other deliverables are prepared for the client, site, facts, and scope identified in the engagement. Unless the agreement states otherwise, the client may use them internally for that purpose but may not resell, publish, or distribute them outside the intended audience without written permission.

Recommendations reflect conditions and information reasonably available at the time. Material site, staffing, operational, equipment, or threat changes may require reassessment.

Limits of consulting

Security consulting identifies observations, options, and priorities. It cannot eliminate all risk, prevent every event, or guarantee safety. It does not replace legal, engineering, architectural, insurance, medical, cybersecurity, or law-enforcement advice.

The client decides whether and how to implement recommendations and remains responsible for confirming compliance with laws, codes, leases, policies, warranties, and insurer requirements.

Questions about an engagement may be sent to ac.owyheestrategic@gmail.com or (712) 579-5603.