Strategic Leadership
vCISO & Advisory Services
Senior security leadership on retainer, someone accountable for the programme, in your management meetings and in front of your board, without the cost of a full-time executive hire.
What the engagement covers
5 services in this practice area, scoped on their own or combined.
-
Virtual CISO Retainer
A named senior practitioner embedded in your leadership rhythm, running the security programme, owning the risk register, and answering to the board for it.
-
Security Strategy & Roadmapping
A current-state assessment turned into a costed, sequenced multi-year roadmap aligned to your business objectives, risk appetite and regulatory obligations.
-
Board & Executive Reporting
Metrics and narrative that translate security posture into business language, risk exposure, trend and decisions required, rather than a vulnerability count nobody can act on.
-
GRC Framework Implementation
Operationalising ISO 27001, NIST CSF or CIS Controls, gap analysis, control design, policy set, evidence model and the run-up to certification audit.
-
Security Architecture Advisory
Design review and target-state architecture for cloud, hybrid and on-premise environments. Identity, segmentation, data protection and monitoring designed in rather than retrofitted.
- ISO 27001
- NIST CSF
- CIS Controls
- COBIT
- King IV
- POPIA
- GDPR
Why organisations bring us in
A vCISO usually gets called when one of these lands on somebody's desk.
-
You need a security leader and cannot justify a full-time salary.
-
A tender requires a named person accountable for security.
-
The board is asking questions nobody in the business can answer.
-
A certification programme has started and nobody owns it.
-
Money is being spent on security. Nobody can say if it is the right spend.
-
The work stalls between IT and the business because nobody chairs it.