Available

Virtual CISO

Security leadership, without the full-time hire.

Ongoing security leadership for teams that need the judgment of a CISO but not a six-figure full-time role: policy ownership, a prioritised roadmap, board and leadership reporting, vendor and third-party risk oversight, and incident-readiness planning, delivered by a senior practitioner on retainer.

We assess against

• ✓ISO 27001
• ✓CIS Benchmarks
• ✓GDPR
• ✓NIS2
• ✓DORA
• ✓OWASP ASVS
• ✓NIST CSF 2.0
• ✓EU AI Act
• ✓EU Cyber Resilience Act
• ✓MITRE ATT&CK

Who it is for

Founders and technology leads who need security decisions made, not just flagged.

What you get

• One senior practitioner accountable for your security roadmap
• Board- and leadership-ready reporting, not raw scanner output
• Vendor and third-party risk reviews as part of the retainer
• Works alongside your existing team; does not replace them

How it stays safe

• Advisory role: the practitioner does not gain standing production access without a separate, scoped agreement
• Not legal advice; counsel reviews regulatory statements
• No compliance certificate is issued or implied

Questions

How is this different from the compliance and risk service?

Compliance and risk is project-based: a gap analysis and evidence pack for a specific framework. Virtual CISO is an ongoing retainer covering security leadership and decisions across your whole program, including but not limited to compliance work.