RESULT AS A SERVICE

Pay for Results,
Not Promises.

We define the outcome with you, take on all the delivery risk, and collect the second half of our fee only when the agreed result is verified. If it's not scoped, it's not in scope — no surprises.

See How It Works

Outcome Defined Upfront

100%

Paid on Delivery

50%

Scope Lock

Written

Success Rate on Scoped Work

97%

Most vendors sell effort.
We sell outcomes.

Traditional IT engagements bill for time, tools and headcount — regardless of whether anything actually improves. Ogma's RaaS model flips that. We work with you to define a precise, measurable result. We then take full ownership of delivery. You pay half upfront to cover our operating costs and the other half only after the result is independently verified.

Traditional Model

Bill by the hour or day. You pay regardless of outcome. Scope creep is common. Results are your problem.

vs.

Ogma RaaS Model

Outcome defined in writing. 50% upfront, 50% on verified delivery. Scope locked. Ogma absorbs delivery risk.

How It Works

Five steps from conversation to verified result.

Discovery Call

We understand your current state, pain points, team capacity and budget. No commitment at this stage.

Outcome Definition

We write down the exact, measurable result — e.g. "ISO 27001 Stage 2 audit passed" or "FortiSIEM live with 50 ATT&CK use cases ingesting 5,000 EPS." Both sides sign off.

Scope Workshop

We agree what is in scope and explicitly what is out of scope. Dependencies you own are listed. No ambiguity allowed.

Delivery

Ogma does all the heavy lifting — architecture, procurement coordination, deployment, tuning, documentation. You provide access and your listed dependencies.

Verification & Final Payment

An agreed verification method confirms the result is achieved. Could be an audit certificate, a signed-off test report or a live demonstration. Final 50% is invoiced.

A Real RaaS Engagement

How it looks end-to-end for a mid-size enterprise.

Example Engagement

ISO 27001 Certification — 480-seat Fintech, Gurugram

Certified ✓ 4 Months

Situation

A Series B fintech required ISO 27001 certification for a major banking client contract. They had no ISMS, no policies, and a 90-day deadline imposed by the client. Their internal IT team of 3 had no compliance experience.

Agreed Outcome

"ISO 27001:2022 Stage 2 audit passed and certificate issued by an accredited certification body within 4 months of engagement start."

EXPLICITLY OUT OF SCOPE

Physical security upgrades (client responsibility)

HR policy changes requiring board approval

Certification body fee

What Ogma Delivered

Wk 1–2

Gap Assessment

Mapped 114 ISO 27001 controls against current state. Identified 47 gaps. Produced remediation priority list and project plan.

Wk 3–5

ISMS Documentation

Built full ISMS — 38 policies, 12 procedures, risk register, Statement of Applicability, asset inventory, and supplier register.

Wk 6–9

Control Implementation

Configured access control, logging, vulnerability scanning, incident response runbooks, and backup verification. Patched 11 critical findings.

Wk 10–12

Internal Audit + Fix

Ran Stage 1 internal audit. Closed 9 non-conformities before certification body engagement. Trained client team on evidence collection.

Wk 13–16

Stage 1 + Stage 2 Audit

Attended both audits with the client. Zero major non-conformities at Stage 2. Certificate issued on first attempt.

Result achieved. Final 50% invoiced.

ISO 27001:2022 certificate issued. Client secured the banking contract. Engagement closed on time, on scope.

Illustrative example based on representative Ogma engagement type. Client details anonymised.

Where RaaS Works

We only offer RaaS on engagements with clearly verifiable outcomes.

Compliance Certification

ISO 27001, CERT-In empanelment, DPDPA readiness assessment sign-off. Binary pass/fail — the cleanest outcome to define and verify.

Typical timeline: 3–6 months

SOC Buildout

Greenfield SOC live with defined SIEM platform, agreed number of use cases active, detection-to-alert SLA demonstrated.

Typical timeline: 6–12 weeks

Vulnerability Reduction

Reduce critical/high CVE count from your current baseline to an agreed target within a defined timeframe, with before/after reports.

Typical timeline: 30–90 days

Infrastructure Deployment

FortiGate HA cluster, FortiSIEM multi-node, Zabbix/CheckMK NMS — live, tested and handed over to your team with runbooks.

Typical timeline: 2–8 weeks

Network Monitoring Coverage

Agreed percentage of your device estate monitored, alerting tested, dashboards live and NOC team trained.

Typical timeline: 4–6 weeks

Penetration Test + Remediation

Not just the report — we stay until agreed critical findings are remediated and a retest confirms closure.

Typical timeline: 2–4 weeks

Payment Structure

Simple, fair, aligned with your success.

50%

Engagement Start

Covers our operating costs — engineering time, tooling, travel, and infrastructure during delivery. Paid before work begins.

THE RESULT HALF

50%

On Verified Result

Invoiced only after the agreed result is independently verified. The verification method is written into the engagement agreement upfront.

Surprise Bills

If it was not in the agreed scope document, we do not bill for it. Change requests are handled through a formal written addendum.

Important: Ogma only accepts RaaS engagements where the outcome is fully within our control or where client dependencies are explicitly listed, accepted and agreed upon in writing. We will decline engagements where the result depends on factors we cannot influence. This is not a limitation — it is how we protect both sides.

Why This Works With Ogma

350+ Deployments

We have delivered enough projects to know exactly what can go wrong and how to prevent it. We only scope what we know we can execute.

NSE 7 Certified Team

Vendor-certified engineers mean we do not learn on your project. Skills are proven before the engagement starts.

Written Scope Lock

Every engagement starts with a signed scope document. Ambiguity is eliminated before a single command is run.

12+ Years Delivering

We have been doing this since before outcome-based models were trendy. The model works because our delivery record supports it.

Pan-India Delivery

On-site when needed, remote where possible. We have delivered across Delhi NCR, Mumbai, Bengaluru, Chennai, Hyderabad and tier-2 cities.

Post-Result Support

The engagement does not end at result delivery. A defined handover, documentation and 30-day hypercare period is included in every RaaS engagement.

Frequently Asked Questions

If Ogma fails to deliver the agreed outcome due to reasons within our control, we continue working at no additional cost until it is achieved or we mutually agree to restructure the engagement. The 50% on-delivery fee is not charged if the result is not verified.

Client dependencies are listed in the scope document. If a dependency is not met on time and this delays or prevents the outcome, the engagement timeline is extended accordingly and the on-delivery fee becomes payable upon outcome verification, regardless of the delay cause.

Not in the pure RaaS model — ongoing services are billed as managed service retainers with defined SLAs. RaaS is specifically for project-based, defined-outcome engagements. However, a managed service can follow a RaaS setup engagement.

Given the scoping overhead involved, RaaS engagements carry a meaningful minimum value — smaller requirements are typically better served by our standard project or managed service models. Share your scope and we will recommend the right engagement model within 2 hours.

The verification method is agreed upfront and written into the scope document. Examples: audit certificate from accredited body (compliance), signed retest report (pen test/remediation), live demonstration to a named client stakeholder (deployment), before/after vulnerability scan exports (VA remediation).

Know the result you want.
Let Ogma deliver it.

Tell us what outcome you need. We will tell you honestly whether it is a good fit for RaaS — and if it is, we will define the scope together and get to work.

Pay for Results,Not Promises.

Most vendors sell effort. We sell outcomes.