Virtual CISO

Part-time security leadership for teams that need a security lead but not yet a full-time one: a named person who owns the roadmap, the policies and the answers to customer security reviews.

Ask about this service All services

Who it is for

  • Customers send security questionnaires and nobody owns the answers.
  • Your board or investors want regular security reporting.
  • You need a security strategy but cannot yet justify a full-time hire.

What you get

  • A security roadmap for the next twelve months, reviewed each quarter
  • Policies written for how your company actually works
  • Board and leadership reporting
  • Answers to customer security questionnaires and reviews
  • A named contact for security decisions and incidents

How it runs

  1. Assess

    A first month to understand the business, its risks and what exists today.

  2. Plan

    A roadmap and priorities agreed with leadership.

  3. Run

    A set number of days each month on the roadmap, reviews and questions.

  4. Report

    A short monthly update and a quarterly review with leadership.

Typical length
Six or twelve months, with a set number of days each month. Lengths are typical. We confirm them when we agree the scope.
What we need from you
A sponsor in leadership, access to the people and systems in scope, and a seat at the meetings where security comes up.

Frameworks it helps with

  • ISO/IEC 27001
  • SOC 2
  • DPDP Act 2023

A virtual CISO can own your compliance programme from readiness through the audit, and in the years after it.

Tell us what you need, and we will suggest a scope.

Ask about this service