Virtual Chief Information Security Officer (vCISO)
The Virtual Chief Information Security Officer (vCISO) service provides your organization with access to a highly skilled cybersecurity leader to assist with your security program challenges and needs. All of our vCISOs have over 20 years of cybersecurity experience across multiple industry verticals and have served as CISOs prior to joining our advisory practice.
The vCISO service is extremely flexible and scalable to meet your organization’s dynamic requirements.
On-Demand: The On-Demand model allows an organization to bring in a cybersecurity subject-matter expert to assist with one or more specific projects. In this model, the vCISO can serve as an extra set of hands to plan, prioritize and implement selected security projects for the organization. On-Demand project examples include, but are not limited to:
- Board of Director’s Security Advisor
- Policy and Procedure Development
- Governance Structure Development
- Security Program/Framework Assessments
- Security Architecture Design
- Product/Service Requirements Development
- Product/Service Procurement and Implementation
- Security Team Resourcing & Development
Light-Touch: The Light-Touch model builds upon the On-Demand model by establishing an ongoing and consistent relationship between the organization and the vCISO. In this model, the vCISO engages more fully and on a regular cadence (~5-25 hrs./wk.), serving as a staff augmentee rather than just a single project advisor. The Light-Touch model allows the organization to assign multiple and concurrent projects and responsibilities to the vCISO. This model also allows the organization to quickly scale the security leadership team to fulfill under-resourced requirements or to back fill a vacancy during staff transition at a fraction of the cost of a full-time employee.
Acting CISO: The Acting CISO model establishes a long-term and fully engaged vCISO to serve as the organization’s acting CISO, at a fraction of the cost of a permanent employee. In this model, the vCISO assumes the full roles and responsibilities of the organization’s CISO position with complete authority over and responsibility for the organization’s security program, infrastructure, and resources. While the role is primarily remote, occasional on-site engagements for comprehensive support.